v0,28,2

scripts/deploy/deploy_core.py

@@ -95,7 +95,7 @@ def digest(path: Path) -> str:
 def fetch_https(url: str, max_bytes: int) -> bytes:
     if urllib.parse.urlparse(url).scheme != 'https':
         raise ValueError('GeoIP downloads require HTTPS.')
-    request = urllib.request.Request(url, headers={'User-Agent': 'RustProxy-installer/0.28.1'})
+    request = urllib.request.Request(url, headers={'User-Agent': 'RustProxy-installer/0.28.2'})
     with urllib.request.urlopen(request, timeout=30) as response:
         if urllib.parse.urlparse(response.geturl()).scheme != 'https':
             raise ValueError('GeoIP download redirected away from HTTPS.')
@@ -380,6 +380,7 @@ ProtectSystem=strict
 LogsDirectory=rustproxy
 LogsDirectoryMode=0770
 ReadWritePaths={data} /var/log/rustproxy
+ReadOnlyPaths=-/etc/letsencrypt -/etc/ssl
 ProtectHome=true
 ProtectKernelTunables=true
 ProtectKernelModules=true