From f9935812cb88127d1c6b54034d50a0b4e9300307 Mon Sep 17 00:00:00 2001
From: Richard Levitte <richard@levitte.org>
Date: Thu, 19 Oct 2023 14:17:35 +0200
Subject: [PATCH] Don't set group write permissions on $FORGEJO_HOME [#8]

The OpenSSH daemon doesn't like it, and refuses public key authentication.

This change is more in line with the forgejo installation instructions, see
https://forgejo.org/docs/latest/admin/installation/#create-directories-forgejo-will-use

Fixes #8
---
 deb/debian/forgejo.preinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/deb/debian/forgejo.preinst b/deb/debian/forgejo.preinst
index f2bb530..ccd9cd2 100644
--- a/deb/debian/forgejo.preinst
+++ b/deb/debian/forgejo.preinst
@@ -29,6 +29,6 @@ case "$1" in
              $FORGEJO_USER
   if ! dpkg-statoverride --list $FORGEJO_HOME >/dev/null ; then
     chown -R $FORGEJO_USER:$FORGEJO_GROUP $FORGEJO_HOME
-    chmod u=rwx,g=rwx,o= $FORGEJO_HOME
+    chmod u=rwx,g=rx,o= $FORGEJO_HOME
   fi
 esac