From c3cc57439f14a16221b3c25383edd5f8d9d51465 Mon Sep 17 00:00:00 2001
From: Anthony Ettinger <anthony@profullstack.com>
Date: Mon, 19 Oct 2026 13:11:50 +0000
Subject: [PATCH] fix(site): publish with explicit 755/644 modes

With a local umask of 007, rsync -a copied 0770/0660 modes to
/var/www/hqterm.sh and nginx answered 500 on every page until the modes were
fixed by hand. rsync now sets D755,F644 itself.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 scripts/deploy-site.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/scripts/deploy-site.sh b/scripts/deploy-site.sh
index d8232b3..6ef2c41 100755
--- a/scripts/deploy-site.sh
+++ b/scripts/deploy-site.sh
@@ -34,5 +34,7 @@ case "$PIT" in
 esac
 
 [ "${1:-}" = "--build" ] && exit 0
-rsync -a "$OUT/" "$DEST"
+# Explicit modes: a restrictive local umask (007) would otherwise publish
+# 0770/0660 files that nginx cannot read, and every page 500s.
+rsync -a --chmod=D755,F644 "$OUT/" "$DEST"
 echo "published to $DEST"