From e5d0610d4a0c702a68cf73200f991f607b0ee7b5 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Fri, 9 Jan 2026 11:39:34 +0200 Subject: Fix fcgiwrap socket permissions for nginx workers Nginx workers (running as user nginx) couldn't connect to fcgiwrap.sock created by root. Add chmod 666 to make the socket world-accessible. --- f3s/git-server/helm-chart/templates/deployment.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/f3s/git-server/helm-chart/templates/deployment.yaml b/f3s/git-server/helm-chart/templates/deployment.yaml index b867add..ac2a48d 100644 --- a/f3s/git-server/helm-chart/templates/deployment.yaml +++ b/f3s/git-server/helm-chart/templates/deployment.yaml @@ -68,7 +68,10 @@ spec: - | # Remove 'user nginx;' directive to avoid setgid errors when running as root sed -i 's/^user nginx;//' /etc/nginx/nginx.conf + # Start fcgiwrap and set socket permissions for nginx user spawn-fcgi -s /var/run/fcgiwrap.sock -n -- /usr/bin/fcgiwrap & + sleep 1 + chmod 666 /var/run/fcgiwrap.sock exec nginx -g 'daemon off;' ports: - containerPort: 80 -- cgit v1.2.3