Redis permissions change

PDowney · web-flow · commit 96f6f42fef1d · 2025-04-24T13:50:54.000-04:00
diff --git a/config/etc/redis/redis.conf b/config/etc/redis/redis.conf
@@ -17,7 +17,7 @@ protected-mode yes
 port 6379
 tcp-backlog 511
 unixsocket /run/redis/redis-server.sock
-unixsocketperm 777
+unixsocketperm 770
 timeout 0
 tcp-keepalive 300
 
diff --git a/scripts/functions/cron/permissions.sh b/scripts/functions/cron/permissions.sh
@@ -72,6 +72,10 @@ chown -R www-data:www-data /var/log/opcache
 chown -R www-data:www-data /var/log/php
 chown -R www-data:www-data /etc/php
 
+# Ensure correct socket ownership and permissions
+chown redis:redis /run/redis/redis-server.sock 2>/dev/null || true
+chmod 770 /run/redis/redis-server.sock 2>/dev/null || true
+
 # Convert line endings
 dos2unix /usr/local/bin/enginescript/*
 
diff --git a/scripts/install/redis/redis-install.sh b/scripts/install/redis/redis-install.sh
@@ -68,10 +68,20 @@ sed -i "s|ReadWritePaths=-/var/run|ReadWritePaths=-/run|g" /lib/systemd/system/r
 chown -R redis:redis /etc/redis/redis.conf
 chmod 775 /etc/redis/redis.conf
 
+# Add www-data to Redis Group
+if ! getent group redis > /dev/null; then
+  groupadd redis
+fi
+usermod -aG redis www-data
+
 # Finalize Redis Install
 systemctl daemon-reload
 service redis-server restart
-sudo systemctl enable redis-server
+systemctl enable redis-server
+
+# Ensure correct socket ownership and permissions
+chown redis:redis /run/redis/redis-server.sock 2>/dev/null || true
+chmod 770 /run/redis/redis-server.sock 2>/dev/null || true
 
 # Redis Service Check
 STATUS="$(systemctl is-active redis)"
