From eccbdffd3b9a300e4eac848676787443c7872518 Mon Sep 17 00:00:00 2001 From: ale <ale@incal.net> Date: Fri, 24 May 2019 13:41:57 +0100 Subject: [PATCH] Add a r/w directory --- debian/acmeserver.service | 1 + 1 file changed, 1 insertion(+) diff --git a/debian/acmeserver.service b/debian/acmeserver.service index f5c62c0..3549e82 100644 --- a/debian/acmeserver.service +++ b/debian/acmeserver.service @@ -17,6 +17,7 @@ PrivateDevices=yes ProtectHome=yes ProtectSystem=full ReadOnlyDirectories=/ +ReadWriteDirectories=/var/lib/acme CapabilityBoundingSet=CAP_NET_BIND_SERVICE [Install] -- GitLab