make uploads directory permissions 0700

debian/postinst

@@ -50,6 +50,8 @@ case "$1" in
       chown -R ${gitlab_user}: $i
     done
 
+    chmod 0700 ${gitlab_uploads_path}
+
     # nginx should be able to connect to gitlab-workhorse.socket and serve public
     chown ${gitlab_user}:${nginx_user} -R ${gitlab_uploads_path}/.. ${gitlab_pid_path}