From 23e748b699e92fa7d2b6c3f68fb8c94aa5354bed Mon Sep 17 00:00:00 2001
From: Oleksandr Berezovskyi <berezovskyi.oleksandr@gmail.com>
Date: Tue, 5 May 2026 21:40:15 +0300
Subject: [PATCH] fix(k8s/archmirror): force 664 perms on synced files to fix
 nginx 403

---
 kubernetes/app/archmirror/configmap-sync.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kubernetes/app/archmirror/configmap-sync.yaml b/kubernetes/app/archmirror/configmap-sync.yaml
index 8493275..c08a06c 100644
--- a/kubernetes/app/archmirror/configmap-sync.yaml
+++ b/kubernetes/app/archmirror/configmap-sync.yaml
@@ -26,7 +26,7 @@ data:
         log "Sync attempt $i/$MAX_RETRIES from $MIRROR_URL"
 
         if rsync --timeout=600 \
-                 -rlptH --safe-links --delete-delay --delay-updates \
+                 -rltH --no-perms --chmod=D755,F664 --safe-links --delete-delay --delay-updates \
                  -v --info=progress2 \
                  "$MIRROR_URL/" "$TARGET_DIR/"; then
             log "Sync completed successfully"