fix(deploy): systemd ReadWritePaths um /opt/mabea/uploads ergänzen
ProtectSystem=strict blockte Schreibzugriff aufs Dokumente-Upload-Verzeichnis (Fund beim Live-Deploy: Verzeichnis existierte, aber Sandbox verweigerte Schreiben außerhalb der bisherigen ReadWritePaths=/opt/mabea/backend). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KC8HYvv6UkCVYheYiTw9DD
This commit is contained in:
@@ -17,7 +17,7 @@ NoNewPrivileges=true
|
|||||||
ProtectSystem=strict
|
ProtectSystem=strict
|
||||||
ProtectHome=true
|
ProtectHome=true
|
||||||
PrivateTmp=true
|
PrivateTmp=true
|
||||||
ReadWritePaths=/opt/mabea/backend
|
ReadWritePaths=/opt/mabea/backend /opt/mabea/uploads
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
|
|||||||
Reference in New Issue
Block a user