feat: allow customize perm of unix file (close #4709)

AlistGo · Jul 8, 2023 · 2b533e4 · 2b533e4
1 parent d3530a8
commit 2b533e4
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 7 deletions.
diff --git a/cmd/server.go b/cmd/server.go
@@ -7,6 +7,7 @@ import (
 	"net/http"
 	"os"
 	"os/signal"
+	"strconv"
 	"sync"
 	"syscall"
 	"time"
@@ -74,6 +75,16 @@ the address is defined in config file`,
 				if err != nil {
 					utils.Log.Fatalf("failed to listen unix: %+v", err)
 				}
+				// set socket file permission
+				mode, err := strconv.ParseUint(conf.Conf.Scheme.UnixFilePerm, 8, 32)
+				if err != nil {
+					utils.Log.Errorf("failed to parse socket file permission: %+v", err)
+				} else {
+					err = os.Chmod(conf.Conf.Scheme.UnixFile, os.FileMode(mode))
+					if err != nil {
+						utils.Log.Errorf("failed to chmod socket file: %+v", err)
+					}
+				}
 				err = unixSrv.Serve(listener)
 				if err != nil && err != http.ErrServerClosed {
 					utils.Log.Fatalf("failed to start unix: %s", err.Error())

diff --git a/internal/conf/config.go b/internal/conf/config.go
@@ -20,13 +20,14 @@ type Database struct {
 }
 
 type Scheme struct {
-	Address    string `json:"address" env:"ADDR"`
-	HttpPort   int    `json:"http_port" env:"HTTP_PORT"`
-	HttpsPort  int    `json:"https_port" env:"HTTPS_PORT"`
-	ForceHttps bool   `json:"force_https" env:"FORCE_HTTPS"`
-	CertFile   string `json:"cert_file" env:"CERT_FILE"`
-	KeyFile    string `json:"key_file" env:"KEY_FILE"`
-	UnixFile   string `json:"unix_file" env:"UNIX_FILE"`
+	Address      string `json:"address" env:"ADDR"`
+	HttpPort     int    `json:"http_port" env:"HTTP_PORT"`
+	HttpsPort    int    `json:"https_port" env:"HTTPS_PORT"`
+	ForceHttps   bool   `json:"force_https" env:"FORCE_HTTPS"`
+	CertFile     string `json:"cert_file" env:"CERT_FILE"`
+	KeyFile      string `json:"key_file" env:"KEY_FILE"`
+	UnixFile     string `json:"unix_file" env:"UNIX_FILE"`
+	UnixFilePerm string `json:"unix_file_perm" env:"UNIX_FILE_PERM"`
 }
 
 type LogConfig struct {