feat: add signed bind-backed user icon uploads

2026-08-06 15:40:55 +00:00
parent a0e1271c88
commit 9046a131f2
12 changed files with 331 additions and 17 deletions
@@ -9,7 +9,8 @@ state_dir="$repository_dir/runtime-data"
 umask 077
 mkdir -p "$secret_dir"
 mkdir -p "$state_dir"
-for name in gitea_webhook_secret image_admin_secret image_sync_core_secret image_sync_core2026_secret; do
+mkdir -p "$state_dir/uploads"
+for name in gitea_webhook_secret image_admin_secret image_sync_core_secret image_sync_core2026_secret image_upload_core_secret image_upload_core2026_secret; do
    path="$secret_dir/$name"
    if [ ! -e "$path" ]; then
        openssl rand -hex 32 > "$path"
@@ -17,5 +18,6 @@ for name in gitea_webhook_secret image_admin_secret image_sync_core_secret image
    chmod 600 "$path"
 done
 chmod 700 "$state_dir"
+chmod 755 "$state_dir/uploads"

 echo "Secret files are ready in $secret_dir (values not printed)."