Is there any published guidance for the proper/minimum/hardened file permissions for Discourse? Specifically, I’m looking for a set of idempotent commands using chown and chmod to strip the permissions to be as low as possible and only grant them when necessary to the minimum privileged user/group. …

bump. Can the developers please chime-in? This would be very helpful to be documented..

Minimum (Hardened) File Permissions

sam (Sam Saffron) May 21, 2020, 6:12am 3

Best I can offer is look at our container web.yml in discourse_docker it sets permissions up there.

This is off beaten path you will need to experiment.

Topic		Replies	Views
WARNING: containers/app.yml file is world-readable. You can secure this file by running: chmod o-rwx containers/app.yml Product Support	11	2124	June 20, 2022
Permissions for uploads folder? Self-hosting	15	453	July 13, 2024
Choose the user PUID and PGID inside the container Development	4	2352	April 5, 2019
Bootsnap::CompileCache::PermissionError Self-hosting	12	1779	March 4, 2021
Permisions errors with "./launcher rebuild app" on fresh install Self-hosting	6	375	September 13, 2025