Apply umask 077 to improve security

Group and others permissions will be unset.

Signed-off-by: Juhyung Park <qkrwngud825@gmail.com>
This commit is contained in:
Juhyung Park
2024-06-12 14:38:32 +09:00
parent 1f544152c1
commit 544fff9595
4 changed files with 5 additions and 0 deletions

View File

@@ -9,6 +9,7 @@ User=immich
Group=immich
Type=simple
Restart=on-failure
UMask=0077
WorkingDirectory=/var/lib/immich/app
EnvironmentFile=/var/lib/immich/env