From d79fbeb4196351046611c7140c026548aaae06d1 Mon Sep 17 00:00:00 2001
From: William <baduhai@proton.me>
Date: Sat, 12 Jul 2025 16:29:46 -0300
Subject: [PATCH] nginx needs access to the webdav socket

---
 hosts/modules/alexandria/services.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/hosts/modules/alexandria/services.nix b/hosts/modules/alexandria/services.nix
index 5ba6480..cced543 100644
--- a/hosts/modules/alexandria/services.nix
+++ b/hosts/modules/alexandria/services.nix
@@ -219,7 +219,8 @@ in
 
         # Create runtime directory for socket
         RuntimeDirectory = "rclone-webdav";
-        RuntimeDirectoryMode = "0755";
+        RuntimeDirectoryMode = "0750";
+        UMask = "0002";
       };
 
       # Ensure the user exists
@@ -228,6 +229,10 @@ in
         mkdir -p /data/webdav
         chown user:users /data/webdav
         chmod 755 /data/webdav
+        # Ensure nginx can access the socket directory
+        mkdir -p /run/rclone-webdav
+        chown user:nginx /run/rclone-webdav
+        chmod 750 /run/rclone-webdav
       '';
     };
   };