v.34.5_fix_systemd

deploy/rustproxy.service

@@ -30,8 +30,9 @@ ProtectSystem=strict
 LogsDirectory=rustproxy
 LogsDirectoryMode=0770
 ReadWritePaths=/var/lib/rustproxy /var/log/rustproxy -/etc/rustproxy
-ReadOnlyPaths=-/etc/letsencrypt -/etc/ssl
-ProtectHome=true
+# Read-only document roots/certificates may live in /home, /var/www or /srv;
+# service-account Unix group/ACL permissions still apply.
+ProtectHome=read-only
 ProtectKernelTunables=true
 ProtectKernelModules=true
 ProtectKernelLogs=true