expose command line option to configure umask for

directories and files

changelog/0.11.0_2022-02-10/issue-189

@@ -0,0 +1,8 @@
+Feature: Expose command line option to configure FileMode and DirMode
+
+Just expose a CLI option to configure Server FileMode and DirMode to
+be able to have files stored in the repo shared with other processes
+(maybe just read only)
+
+https://github.com/restic/rest-server/issues/189
+https://github.com/restic/rest-server/pull/190

cmd/rest-server/main.go

@@ -53,6 +53,8 @@ func init() {
 	flags.BoolVar(&server.PrivateRepos, "private-repos", server.PrivateRepos, "users can only access their private repo")
 	flags.BoolVar(&server.Prometheus, "prometheus", server.Prometheus, "enable Prometheus metrics")
 	flags.BoolVar(&server.PrometheusNoAuth, "prometheus-no-auth", server.PrometheusNoAuth, "disable auth for Prometheus /metrics endpoint")
+	flags.Uint32Var(&server.DirMode, "dir-mode", server.DirMode, "filesystem dir mode: defaults to 0700. DO NOT MESS UNLESS YOU KNOW WHAT YOUR DOING")
+	flags.Uint32Var(&server.FileMode, "file-mode", server.FileMode, "filesystem file mode: defaults to 0600. DO NOT MESS UNLESS YOU KNOW WHAT YOUR DOING")
 }
 
 var version = "0.11.0"

handlers.go

@@ -2,6 +2,7 @@ package restserver
 
 import (
 	"errors"
+	"io/fs"
 	"log"
 	"net/http"
 	"path"
@@ -30,6 +31,8 @@ type Server struct {
 	MaxRepoSize      int64
 	PanicOnError     bool
 	NoVerifyUpload   bool
+	DirMode          uint32
+	FileMode         uint32
 
 	htpasswdFile *HtpasswdFile
 	quotaManager *quota.Manager
@@ -90,6 +93,8 @@ func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		QuotaManager:   s.quotaManager, // may be nil
 		PanicOnError:   s.PanicOnError,
 		NoVerifyUpload: s.NoVerifyUpload,
+		DirMode:        fs.FileMode(s.DirMode),
+		FileMode:       fs.FileMode(s.FileMode),
 	}
 	if s.Prometheus {
 		opt.BlobMetricFunc = makeBlobMetricFunc(username, folderPath)