chore: run the server unit as root from /opt/lpra

The panel's ufw integration needs root; the database now lives next to
the binary in /opt/lpra.

deploy/lpra-server.service

@@ -33,17 +33,14 @@ After=network-online.target
 Wants=network-online.target
 
 [Service]
-Type=simple
-User=lpra
-Group=lpra
 WorkingDirectory=/opt/lpra
 
 # Optional environment overrides; "-" means the file is not required.
-EnvironmentFile=-/etc/lpra-server.env
+
 
 ExecStart=/opt/lpra/lpra-server \
     -addr 127.0.0.1:8091 \
-    -db /var/lib/lpra/lpra.db \
+    -db /opt/lpra/lpra.db \
     -dist /opt/lpra/dist
 
 Restart=always
@@ -59,7 +56,7 @@ ProtectKernelTunables=true
 ProtectControlGroups=true
 RestrictSUIDSGID=true
 # The server only needs to write its SQLite database here.
-ReadWritePaths=/var/lib/lpra
+ReadWritePaths=/opt/lpra
 
 [Install]
 WantedBy=multi-user.target