how do I configure syncthing to inherit folder ACL "mask"?

Trying to sync two linux machines. Permissions not synced. Whenever I create file on one machine, the other one always gets file creates with mask::r--, even though folder in which file resides has mask of rwx:

follder has ACLs:

# getfacl test
# file: test
# owner: root
# group: root
user::rwx
group::rwx
group:nas-rodit:rwx
group:nas-kids:r-x
group:nas-general:r-x
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:nas-rodit:rwx
default:group:nas-kids:r-x
default:group:nas-general:r-x
default:mask::rwx
default:other::---

and if I create file in it, it would be:

# echo "test" > test/file1.txt
# getfacl test/file1.txt
# file: test/file1.txt
# owner: root
# group: root
user::rw-
group::rwx			#effective:rw-
group:nas-rodit:rwx		#effective:rw-
group:nas-kids:r-x		#effective:r--
group:nas-general:r-x		#effective:r--
mask::rw-
other::---

but if the file was created using syncthing, then permissions would be:

# getfacl test/file2.txt
# file: test/file2.txt
# owner: root
# group: root
user::rw-
group::rwx			#effective:r--
group:nas-rodit:rwx		#effective:r--
group:nas-kids:r-x		#effective:r--
group:nas-general:r-x		#effective:r--
mask::r--
other::---

basically: mask::r--, and because of that all group permissions get reset. Why this happens and how do I change that behavior to inherit mask from parent folder?

Syncthing doesn’t read, understand, sync or modify ACL:s. The regular permission bits should be copied just fine though…

but as you seen, the “mask” permission gets set to “r–”, while normal file create with echo "test" > test/file1.txt will make it “rw-”.

So that would be something inherited from a parent perhaps, or some other kind of default? As we don’t touch ACLs I don’t see what else it would be?

@calmh, you are saying that syncthing is not touch ACL. So it is working with basic unix like permissions. Correct?

if yes, how is syncthing working with umask. I have problem with that, see my thread Umask on synology.

umask :: https://en.wikipedia.org/wiki/Umask

The umask is not used.