Fix file permissions

backend/handlers/handle_message_upload.go

@@ -66,26 +66,11 @@ func (store *Store) UploadMessageFile(ctx *gin.Context) {
 	}
 	filename := hex.EncodeToString(b) + ext
 
-	uploadDir := "/backend/uploads"
-	if err := os.MkdirAll(uploadDir, 0755); err != nil {
-		ctx.JSON(http.StatusInternalServerError, gin.H{"error": "failed to create upload directory"})
-		return
-	}
-	// Ensure directory is world-readable so nginx can serve files
-	if err := os.Chmod(uploadDir, 0755); err != nil {
-		ctx.JSON(http.StatusInternalServerError, gin.H{"error": "failed to create upload directory"})
-		return
-	}
-
 	dest := filepath.Join(uploadDir, filename)
 	if err := ctx.SaveUploadedFile(file, dest); err != nil {
 		ctx.JSON(http.StatusInternalServerError, gin.H{"error": "failed to save file"})
 		return
 	}
-	if err := os.Chmod(dest, 0644); err != nil {
-		ctx.JSON(http.StatusInternalServerError, gin.H{"error": "failed to set file permissions"})
-		return
-	}
 
 	ctx.JSON(http.StatusOK, gin.H{"url": "/uploads/" + filename})
 }

nginx/entrypoint.sh

@@ -17,9 +17,5 @@ else
   envsubst '${DOMAIN}' </etc/nginx/nginx_setup.conf.template >/etc/nginx/nginx.conf
 fi
 
-# Ensure uploads directory and files are readable by nginx worker processes
-chmod 755 /uploads 2>/dev/null || true
-chmod -R a+rX /uploads 2>/dev/null || true
-
 # Start nginx
 nginx -g 'daemon off;'