moved check to composer

Author: Your Name

DOCKER_COMPOSE_SETUP.md

@@ -63,7 +63,12 @@ This setup uses `serversideup/php:8.4-fpm-nginx` as the base image and is design
    docker compose exec loops php artisan passport:keys
    ```
 
-8. **Create admin user:**
+8. **Ensure boot-time environment:**
+   ```bash
+   docker compose exec loops php artisan app:ensure-boottime
+   ```
+
+9. **Create admin user:**
    ```bash
    docker compose exec loops php artisan create-admin-account
    ```

app/Console/Commands/ComposerPostInstallCommand.php

@@ -2,6 +2,7 @@
 
 namespace App\Console\Commands;
 
+use App\Services\BootstrapService;
 use App\Services\SettingsFileService;
 use Illuminate\Console\Command;
 use Illuminate\Support\Facades\Cache;
@@ -33,6 +34,7 @@ public function handle()
 
             Cache::forget('version_check_result');
             app(SettingsFileService::class)->flush();
+            BootstrapService::ensureBoottimeEnvironment();
 
             $this->info('Post-install tasks completed successfully.');
         } catch (\Exception $e) {

app/Console/Commands/EnsureBoottimeEnvCommand.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\BootstrapService;
+use Illuminate\Console\Command;
+
+class EnsureBoottimeEnvCommand extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'app:ensure-boottime';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Ensure boot-time environment checks pass (directories, permissions, etc.)';
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(): int
+    {
+        try {
+            BootstrapService::ensureBoottimeEnvironment();
+            $this->info('All boot-time environment checks passed.');
+
+            return Command::SUCCESS;
+        } catch (\RuntimeException $e) {
+            $this->error($e->getMessage());
+
+            return Command::FAILURE;
+        }
+    }
+}

app/Services/BootstrapService.php

@@ -1,25 +1,49 @@
 <?php
+
 namespace App\Services;
 
+use Illuminate\Support\Facades\File;
 use RuntimeException;
 
 class BootstrapService
 {
     public static function ensureBoottimeEnvironment(): void
     {
+        self::checkOAuthKeyPermissions();
+        self::ensureAvatarTempDirectory();
+    }
+
+    protected static function ensureAvatarTempDirectory(): void
+    {
+        $path = storage_path('app/avatar-temp');
+
+        if (! File::isDirectory($path)) {
+            File::makeDirectory($path, 0755, true);
 
-        if (app()->runningInConsole()) {
             return;
-        } 
+        }
 
-        self::checkOAuthKeyPermissions();
+        $perms = fileperms($path) & 0777;
+
+        if ($perms === 0755) {
+            return;
+        }
+
+        if (@chmod($path, 0755)) {
+            return;
+        }
+
+        throw new RuntimeException(
+            "Avatar temp directory \"{$path}\" has incorrect permissions (" . self::formatPerms($perms) . "). " .
+            "Expected 0755. Please run: chmod 755 {$path}"
+        );
     }
 
     protected static function checkOAuthKeyPermissions(): void
     {
         $privateKeyPath = storage_path('oauth-private.key');
         $publicKeyPath = storage_path('oauth-public.key');
-        
+
         self::checkOAuthFile($privateKeyPath);
         self::checkOAuthFile($publicKeyPath);
     }
@@ -33,15 +57,15 @@ protected static function checkOAuthFile(string $filePath): void
         }
 
         $permissions = self::getPermissions($filePath);
-        
+
         $isSafe = ($permissions === '600' || $permissions === '660');
-        
+
         if ($isSafe) {
             return;
         }
 
-        $fixed = @chmod($filePath, 0660);  // Try to change the chmod to 660
-        
+        $fixed = @chmod($filePath, 0660);
+
         if ($fixed) {
             return;
         }
@@ -53,7 +77,13 @@ protected static function checkOAuthFile(string $filePath): void
 
     protected static function getPermissions(string $filePath): string
     {
-        $permissionNumber = fileperms($filePath) & 0777;// fileperms() returns a number with extra info we don't need & 0777 removes that extra info, leaving just the permissions
-        return decoct($permissionNumber);  // Convert to a readable string like "644" or "600" (decoct converts decimal to octal)
+        $permissionNumber = fileperms($filePath) & 0777;
+
+        return decoct($permissionNumber);
+    }
+
+    protected static function formatPerms(int $perms): string
+    {
+        return sprintf('%04o', $perms);
     }
 }