1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-06-15 00:05:11 +02:00

Hardening: run the http and php as different users

This commit is contained in:
Florent Daigniere
2022-11-13 13:44:35 +01:00
parent d7b80e94a4
commit 06c0c78956
3 changed files with 8 additions and 8 deletions

View File

@ -110,8 +110,7 @@ conf.jinja("/defaults/application.ini", context, "/data/_data_/_default_/configs
conf.jinja("/defaults/php.ini", context, "/etc/php81/php.ini")
# setup permissions
os.system("chown -R nginx:nginx /data /var/www")
os.system("chmod -R a+rX /var/www/")
os.system("chown -R mailu:mailu /data")
# Configure nginx
conf.jinja("/conf/nginx-webmail.conf", context, "/etc/nginx/http.d/webmail.conf")