From 7ab16bc949d932c20788f63956e61f0441903ce9 Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Sat, 31 Jan 2026 19:08:02 +0900
Subject: [PATCH] temmie/userweb: restrict log access

---
 hosts/temmie/services/userweb.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/temmie/services/userweb.nix b/hosts/temmie/services/userweb.nix
index 457fd31..51e3783 100644
--- a/hosts/temmie/services/userweb.nix
+++ b/hosts/temmie/services/userweb.nix
@@ -161,6 +161,7 @@ in
 
       ConfigurationDirectory = [ "httpd" ];
       LogsDirectory = [ "httpd" ];
+      LogsDirectoryMode = "0700";
 
       CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];
       LockPersonality = true;