From 5e6e0b8a3ac09b9743be00c509e2a31a2abef95d Mon Sep 17 00:00:00 2001
From: iRedTea <red__tea@outlook.com>
Date: Tue, 13 Oct 2026 14:55:37 +0300
Subject: [PATCH] chore: run the server unit as root from /opt/lpra

The panel's ufw integration needs root; the database now lives next to
the binary in /opt/lpra.
---
 deploy/lpra-server.service | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/deploy/lpra-server.service b/deploy/lpra-server.service
index d9e1204..b61b1b0 100644
--- a/deploy/lpra-server.service
+++ b/deploy/lpra-server.service
@@ -33,17 +33,14 @@ After=network-online.target
 Wants=network-online.target
 
 [Service]
-Type=simple
-User=lpra
-Group=lpra
 WorkingDirectory=/opt/lpra
 
 # Optional environment overrides; "-" means the file is not required.
-EnvironmentFile=-/etc/lpra-server.env
+
 
 ExecStart=/opt/lpra/lpra-server \
     -addr 127.0.0.1:8091 \
-    -db /var/lib/lpra/lpra.db \
+    -db /opt/lpra/lpra.db \
     -dist /opt/lpra/dist
 
 Restart=always
@@ -59,7 +56,7 @@ ProtectKernelTunables=true
 ProtectControlGroups=true
 RestrictSUIDSGID=true
 # The server only needs to write its SQLite database here.
-ReadWritePaths=/var/lib/lpra
+ReadWritePaths=/opt/lpra
 
 [Install]
 WantedBy=multi-user.target