refactor: update system config, sudoers, and install script

2026-06-16 03:36:55 +00:00
parent 708b8b5d15
commit 6e814d2827
6 changed files with 162 additions and 318 deletions
@@ -19,7 +19,7 @@ Environment=HOME={{ PROJECT_DIR }}

 # Security hardening
 ProtectSystem=strict
-ReadWritePaths={{ PROJECT_DIR }} /tmp /etc/systemd/network
+ReadWritePaths={{ PROJECT_DIR }} /tmp /etc/systemd/network /etc/nginx /etc/dnsmasq.d /etc/wireguard /run/sudo /run/firewalld
 PrivateTmp=yes
 ProtectKernelTunables=yes
 ProtectKernelModules=yes