change file permissions to /uploads

backend/handlers/handle_message_upload.go

@@ -48,6 +48,11 @@ func (store *Store) UploadMessageFile(ctx *gin.Context) {
 		ctx.JSON(http.StatusInternalServerError, gin.H{"error": "failed to create upload directory"})
 		return
 	}
+	// Ensure directory is world-readable so nginx can serve files
+	if err := os.Chmod(uploadDir, 0755); err != nil {
+		ctx.JSON(http.StatusInternalServerError, gin.H{"error": "failed to create upload directory"})
+		return
+	}
 
 	dest := filepath.Join(uploadDir, filename)
 	if err := ctx.SaveUploadedFile(file, dest); err != nil {

nginx/entrypoint.sh

@@ -17,7 +17,8 @@ else
     envsubst '${DOMAIN}' < /etc/nginx/nginx_setup.conf.template > /etc/nginx/nginx.conf
 fi
 
-# Ensure uploads are readable by nginx worker processes
+# Ensure uploads directory and files are readable by nginx worker processes
+chmod 755 /uploads 2>/dev/null || true
 chmod -R a+rX /uploads 2>/dev/null || true
 
 # Start nginx