deemanone/padelnomics
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(infra): run services as padelnomics_service user instead of root

Browse Source 
- setup_server.sh now requires root, creates padelnomics_service user,
  adds to docker group, generates deploy key in service user's home,
  owns /opt/padelnomics and /data/padelnomics to service user
- supervisor service: User=padelnomics_service, updated PATH
- landing-backup service: User=padelnomics_service

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Deeman
2026-02-24 02:51:09 +01:00
parent 189f04cc47
commit 619d1570ef
3 changed files with 50 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
infra/landing-backup/padelnomics-landing-backup.service
View File

@@ -5,6 +5,7 @@ Wants=network-online.target
[Service]
Type=oneshot
User=padelnomics_service
EnvironmentFile=/opt/padelnomics/.env
Environment=LANDING_DIR=/data/padelnomics/landing
ExecStart=/usr/bin/rclone sync ${LANDING_DIR} :s3:${LITESTREAM_R2_BUCKET}/padelnomics/landing \