restrict permissions on mounts

2023-02-04 23:34:41 +00:00
parent a44b410265
commit 977a12730f
4 changed files with 10 additions and 8 deletions
--- a/roles/nextcloud/templates/rclone_mount_nextcloud.service.j2
+++ b/roles/nextcloud/templates/rclone_mount_nextcloud.service.j2
@@ -11,12 +11,13 @@ Type=notify
 ExecStart=/usr/bin/rclone mount DTSV_crypt:cloud_data {{ nextcloud_rclone_mount_dir }} \
        --devname rclone \
        --use-mmap \
+        --default-permissions \
        --allow-other \
        --uid {{ created_rclone_user.uid }} \
        --gid {{ created_rclone_group.gid }} \
-        --umask 002 \
-        --dir-perms 775 \
-        --file-perms 664 \
+        --umask 0007 \
+        --dir-perms 0770 \
+        --file-perms 0660 \
        --dir-cache-time 8760h \
        --poll-interval 1h \
        --buffer-size 64M \