laminar: Ensure the nginx user can access the archive directory. HEAD main

1 files changed, 10 insertions, 2 deletions

diff --git a/guix/forge/laminar.scm b/guix/forge/laminar.scm
index 16f5de7..dcbc5bf 100644
--- a/guix/forge/laminar.scm
+++ b/guix/forge/laminar.scm
@@ -1,5 +1,5 @@
 ;;; guix-forge --- Guix software forge meta-service
-;;; Copyright © 2021–2022, 2024 Arun Isaac <arunisaac@systemreboot.net>
+;;; Copyright © 2021–2022, 2024–2025 Arun Isaac <arunisaac@systemreboot.net>
 ;;;
 ;;; This file is part of guix-forge.
 ;;;
@@ -164,7 +164,15 @@ of @var{<forge-laminar-job>} objects."
                                 (lambda (file stat)
                                   (memq (stat:type stat)
                                         '(regular directory)))
-                                #:directories? #t))))))
+                                #:directories? #t))
+          ;; Ensure the state directory has the right permissions so
+          ;; that the nginx user can get in and serve files from the
+          ;; archive directory. The state directory is the home of the
+          ;; laminar user and is created with more restrictive
+          ;; permissions. So, the permissions need to be overridden.
+          ;; The archive directory, however, is always created with
+          ;; the right permissions.
+          (chmod #$state-directory #o755)))))
 
 (define forge-laminar-service-type
   (service-type