…

1 files changed, 3 insertions, 1 deletions

diff --git a/ymir.nix b/ymir.nix
index d1feb2d8..7212044c 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -983,10 +983,12 @@ in rec {
     forceLocalDataSSL = true;
     localUsers = true;
     writeEnable = true;
-    chrootlocalUser = false;
+    chrootlocalUser = true;
     rsaKeyFile = "/var/lib/acme/yggdrasil.li/key.pem";
     rsaCertFile = "/var/lib/acme/yggdrasil.li/fullchain.pem";
     extraConfig = ''
+      local_umask=022
+    
       log_ftp_protocol=YES
       xferlog_enable=YES