Permissions on /opt/postal/config

[brywhi]

Hello, we installed postal as instructed on https://docs.postalserver.io/install/installation

One issue we're having- I have to chmod 755 /opt/postal/config each time we restart the server/update it, otherwise we get logs about the containers not being able to access the config directory. It seems to go back to 700 each time we update. Should I try to make the 755 permanent, or did I screw something up in the installation?

[astorrer]

From Dockerfile.yml

Setup an application

RUN useradd -r -d /opt/postal -m -s /bin/bash -u 999 postal
USER postal
RUN mkdir -p /opt/postal/app /opt/postal/config
WORKDIR /opt/postal/app

I wonder if it's something related to the docker containers.

[willpower232]

Are you changing permissions of the config directory on the host or inside the container?

[brywhi]

Directly on the host.

…

-BW

On Tue, Dec 21, 2021, 5:23 AM Will Power ***@***.***> wrote: Are you changing permissions of the config directory on the host or inside the container? — Reply to this email directly, view it on GitHub <#1776 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AKGOCL2KNYWVDVTSRVTSFGDUSBWSVANCNFSM5KJWVSGA> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[willpower232]

That is weird, the permissions on the host shouldn't randomly change unless you have something else going on. Is there some security process or something resetting the permissions?

[brywhi]

I figured this one out. We had created a cron job on the host to automatically copy certs from the caddy-data directory into the config directory for the SMTP server to use, and that cron job breaking the permissions. I fixed the cron job and now we are good to go!

[willpower232]

ah excellent, we have similar cron jobs so will bear that in mind

[brywhi]

Not a problem with Postalserver, this was something we did to ourselves with a poorly written cron task.