From 6562c7e9fe12928eb2cc58ac523a73d1d72ba7de Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Wed, 6 Dec 2017 14:31:36 +0100
Subject: =?UTF-8?q?=E2=80=A6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ymir.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ymir.nix b/ymir.nix
index d1feb2d8..7212044c 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -983,10 +983,12 @@ in rec {
     forceLocalDataSSL = true;
     localUsers = true;
     writeEnable = true;
-    chrootlocalUser = false;
+    chrootlocalUser = true;
     rsaKeyFile = "/var/lib/acme/yggdrasil.li/key.pem";
     rsaCertFile = "/var/lib/acme/yggdrasil.li/fullchain.pem";
     extraConfig = ''
+      local_umask=022
+    
       log_ftp_protocol=YES
       xferlog_enable=YES
     
-- 
cgit v1.2.3