Make the base directory owned by root

Whoever owns it could rename any service's directory (even a root-owned one) and put another in its place.

On Synology, the recursive chown now compares only the base path's gid (its uid is root's now) and runs before the base paths are ensured, so it doesn't undo their ownership.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Slavi Pantaleev
2026-10-30 08:52:30 +02:00
co-authored by Claude Opus 5.5
parent fd155cad65
commit 5a3137ca8d
3 changed files with 31 additions and 19 deletions
@@ -227,6 +227,11 @@ matrix_base_synology_volume_path: "/volume1"
matrix_base_data_path: "/matrix"
matrix_base_data_path_mode: "750"
# Owned by root: whoever owns it could rename any service's directory (even a root-owned one) and put another in its place.
# The group lets the matrix user reach the services' directories.
matrix_base_data_path_owner: root
matrix_base_data_path_group: "{{ matrix_group_name }}"
matrix_bin_path: "{{ matrix_base_data_path }}/bin"
matrix_host_command_sleep: "/usr/bin/env sleep"