fix: root-only server, no deploy user
This commit is contained in:
@@ -17,13 +17,10 @@ node --version # ожидается >= 22
|
|||||||
npm --version
|
npm --version
|
||||||
```
|
```
|
||||||
|
|
||||||
## 2. Пользователь и каталоги
|
## 2. Каталоги
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
useradd --create-home --shell /bin/bash deploy
|
|
||||||
mkdir -p /opt/craftshop/server/uploads /opt/craftshop/www
|
mkdir -p /opt/craftshop/server/uploads /opt/craftshop/www
|
||||||
chown -R deploy:deploy /opt/craftshop
|
|
||||||
chmod 755 /opt/craftshop /opt/craftshop/server /opt/craftshop/www
|
|
||||||
```
|
```
|
||||||
|
|
||||||
## 3. systemd unit
|
## 3. systemd unit
|
||||||
@@ -36,8 +33,8 @@ After=network.target
|
|||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=simple
|
Type=simple
|
||||||
User=deploy
|
User=root
|
||||||
Group=deploy
|
Group=root
|
||||||
WorkingDirectory=/opt/craftshop/server
|
WorkingDirectory=/opt/craftshop/server
|
||||||
EnvironmentFile=-/opt/craftshop/server/.env
|
EnvironmentFile=-/opt/craftshop/server/.env
|
||||||
ExecStart=/usr/bin/node src/index.js
|
ExecStart=/usr/bin/node src/index.js
|
||||||
@@ -127,7 +124,6 @@ ADMIN_EMAIL=<твой email>
|
|||||||
CORS_ORIGIN=https://<твой-домен>
|
CORS_ORIGIN=https://<твой-домен>
|
||||||
IS_DEFAULT_CODE_ENABLED=false
|
IS_DEFAULT_CODE_ENABLED=false
|
||||||
ENV
|
ENV
|
||||||
chown deploy:deploy /opt/craftshop/server/.env
|
|
||||||
chmod 600 /opt/craftshop/server/.env
|
chmod 600 /opt/craftshop/server/.env
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|||||||
@@ -32,7 +32,7 @@ DEPLOY_PATH="${DEPLOY_PATH:-/opt/craftshop}"
|
|||||||
DEPLOY_FRONTEND_DIST="${DEPLOY_FRONTEND_DIST:-$DEPLOY_PATH/www}"
|
DEPLOY_FRONTEND_DIST="${DEPLOY_FRONTEND_DIST:-$DEPLOY_PATH/www}"
|
||||||
DEPLOY_SSH_IDENTITY="${DEPLOY_SSH_IDENTITY:-}"
|
DEPLOY_SSH_IDENTITY="${DEPLOY_SSH_IDENTITY:-}"
|
||||||
DEPLOY_RESTART_CMD="${DEPLOY_RESTART_CMD:-systemctl restart craftshop-api}"
|
DEPLOY_RESTART_CMD="${DEPLOY_RESTART_CMD:-systemctl restart craftshop-api}"
|
||||||
DEPLOY_SERVER_OWNER="${DEPLOY_SERVER_OWNER:-deploy}"
|
DEPLOY_SERVER_OWNER="${DEPLOY_SERVER_OWNER:-root}"
|
||||||
DEPLOY_SKIP_CHOWN="${DEPLOY_SKIP_CHOWN:-0}"
|
DEPLOY_SKIP_CHOWN="${DEPLOY_SKIP_CHOWN:-0}"
|
||||||
|
|
||||||
RSYNC_OPTS=(-az --delete --human-readable --progress)
|
RSYNC_OPTS=(-az --delete --human-readable --progress)
|
||||||
|
|||||||
Reference in New Issue
Block a user