wangdl/api-server
2
0
Fork 0
Code Issues 28 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: remove ProtectSystem/ReadWritePaths from systemd units
All checks were successful
Deploy API Server / build-and-deploy (push) Successful in 47s
Details

Browse Source 
ProtectSystem=strict requires /run/systemd/unit-root paths to exist
which fails on production. Worker only needs network access (Redis/MySQL).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
wangdl 2026-06-19 21:26:47 +08:00
parent bd60c2786f
commit 24ceb1353e
2 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
deploy/zhixi-nest-api.service
View File

@ -20,10 +20,6 @@ EnvironmentFile=/opt/zhixi/env/.env.production
# Security # Security
NoNewPrivileges=yes NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/opt/zhixi/api-server/uploads
ReadWritePaths=/opt/zhixi/api-server/prisma
# Logging # Logging
StandardOutput=journal StandardOutput=journal

3
deploy/zhixi-nest-worker.service
View File

@ -26,9 +26,6 @@ MemoryMax=512M
# Security # Security
NoNewPrivileges=yes NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/opt/zhixi/backend/uploads
# Logging # Logging
StandardOutput=journal StandardOutput=journal