Merge pull request 'fix: set TTS bridge secret ownership' (#22 ) from fix/tts-secret-owner-20260813130906 into main

fix: make bridge secrets readable by service uid
Merge pull request 'fix: recover TTS bridge secret bind mounts' (#21 ) from fix/tts-bridge-bind-mount-20260813130448 into main
2026-08-13 13:09:09 +02:00 · 2026-08-13 13:09:07 +02:00 · 2026-08-13 13:04:51 +02:00
1 changed files with 2 additions and 1 deletions
--- a/app.py
+++ b/app.py
@ -1914,7 +1914,8 @@ for filename, value in files.items():
    if path.is_dir():
        path.rmdir()
    path.write_text(value)
-    os.chmod(path, 0o600)
+    os.chown(path, 10001, 10001)
+    os.chmod(path, 0o400)
 """.format(files_json=json.dumps(files))
    encoded = base64.b64encode(installer.encode()).decode()
    command = f"sudo python3 -c {__import__('shlex').quote(f'import base64;exec(base64.b64decode({encoded!r}))')}"
Author	SHA1	Message	Date
sascha	0d9a43c8f6	Merge pull request 'fix: set TTS bridge secret ownership' (#22 ) from fix/tts-secret-owner-20260813130906 into main	2026-08-13 13:09:09 +02:00
sascha	cb54a7977a	fix: make bridge secrets readable by service uid	2026-08-13 13:09:07 +02:00
sascha	64e4a1fb5b	Merge pull request 'fix: recover TTS bridge secret bind mounts' (#21 ) from fix/tts-bridge-bind-mount-20260813130448 into main	2026-08-13 13:04:51 +02:00