fix: root-only server, no deploy user

This commit is contained in:
Kirill
2026-05-14 20:40:34 +05:00
parent 434859b606
commit a577cec9a9
2 changed files with 4 additions and 8 deletions
+3 -7
View File
@@ -17,13 +17,10 @@ node --version # ожидается >= 22
npm --version npm --version
``` ```
## 2. Пользователь и каталоги ## 2. Каталоги
```bash ```bash
useradd --create-home --shell /bin/bash deploy
mkdir -p /opt/craftshop/server/uploads /opt/craftshop/www mkdir -p /opt/craftshop/server/uploads /opt/craftshop/www
chown -R deploy:deploy /opt/craftshop
chmod 755 /opt/craftshop /opt/craftshop/server /opt/craftshop/www
``` ```
## 3. systemd unit ## 3. systemd unit
@@ -36,8 +33,8 @@ After=network.target
[Service] [Service]
Type=simple Type=simple
User=deploy User=root
Group=deploy Group=root
WorkingDirectory=/opt/craftshop/server WorkingDirectory=/opt/craftshop/server
EnvironmentFile=-/opt/craftshop/server/.env EnvironmentFile=-/opt/craftshop/server/.env
ExecStart=/usr/bin/node src/index.js ExecStart=/usr/bin/node src/index.js
@@ -127,7 +124,6 @@ ADMIN_EMAIL=<твой email>
CORS_ORIGIN=https://<твой-домен> CORS_ORIGIN=https://<твой-домен>
IS_DEFAULT_CODE_ENABLED=false IS_DEFAULT_CODE_ENABLED=false
ENV ENV
chown deploy:deploy /opt/craftshop/server/.env
chmod 600 /opt/craftshop/server/.env chmod 600 /opt/craftshop/server/.env
``` ```
+1 -1
View File
@@ -32,7 +32,7 @@ DEPLOY_PATH="${DEPLOY_PATH:-/opt/craftshop}"
DEPLOY_FRONTEND_DIST="${DEPLOY_FRONTEND_DIST:-$DEPLOY_PATH/www}" DEPLOY_FRONTEND_DIST="${DEPLOY_FRONTEND_DIST:-$DEPLOY_PATH/www}"
DEPLOY_SSH_IDENTITY="${DEPLOY_SSH_IDENTITY:-}" DEPLOY_SSH_IDENTITY="${DEPLOY_SSH_IDENTITY:-}"
DEPLOY_RESTART_CMD="${DEPLOY_RESTART_CMD:-systemctl restart craftshop-api}" DEPLOY_RESTART_CMD="${DEPLOY_RESTART_CMD:-systemctl restart craftshop-api}"
DEPLOY_SERVER_OWNER="${DEPLOY_SERVER_OWNER:-deploy}" DEPLOY_SERVER_OWNER="${DEPLOY_SERVER_OWNER:-root}"
DEPLOY_SKIP_CHOWN="${DEPLOY_SKIP_CHOWN:-0}" DEPLOY_SKIP_CHOWN="${DEPLOY_SKIP_CHOWN:-0}"
RSYNC_OPTS=(-az --delete --human-readable --progress) RSYNC_OPTS=(-az --delete --human-readable --progress)