From 34b41aab18b9b61de87f51dddb13106abe6cf6ad Mon Sep 17 00:00:00 2001
From: erichhasl <erich.hasl@gmail.com>
Date: Sun, 30 Jun 2019 21:05:36 +0200
Subject: [PATCH] allow large files to be read by the web server

---
 jdav_web/jdav_web/settings.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/jdav_web/jdav_web/settings.py b/jdav_web/jdav_web/settings.py
index 385edaf..b10b73b 100644
--- a/jdav_web/jdav_web/settings.py
+++ b/jdav_web/jdav_web/settings.py
@@ -36,6 +36,11 @@ MEDIA_ROOT = os.environ.get('DJANGO_MEDIA_ROOT',
 			    os.path.join((os.path.join(BASE_DIR, os.pardir)), "media"))
 MEDIA_MEMBERLISTS = os.path.join((os.path.join(BASE_DIR, os.pardir)), "media")
 
+# prevent large files from being unreadable by the server
+# see
+# https://stackoverflow.com/questions/51439689/django-nginx-error-403-forbidden-when-serving-media-files-over-some-size
+FILE_UPLOAD_PERMISSIONS = 0o640
+
 # x forward
 
 USE_X_FORWARDED_HOST = True