From 54326268425b64b7f76d24ffc32f0ce31e125f63 Mon Sep 17 00:00:00 2001
From: Thomas <51749973+Thovi98@users.noreply.github.com>
Date: Wed, 8 Nov 2023 16:41:02 +0100
Subject: [PATCH] Update bookwyrm-server.service

---
 conf/bookwyrm-server.service | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/conf/bookwyrm-server.service b/conf/bookwyrm-server.service
index 1256daf..89459f2 100644
--- a/conf/bookwyrm-server.service
+++ b/conf/bookwyrm-server.service
@@ -13,13 +13,13 @@ ExecStart=__INSTALL_DIR__/venv/bin/gunicorn bookwyrm.wsgi:application --bind 127
 
 #ProtectSystem=strict
 ProtectHome=tmpfs
-#InaccessiblePaths=-/media -/mnt -/srv
+InaccessiblePaths=-/media -/mnt -/srv
 PrivateTmp=yes
 #TemporaryFileSystem=/var /run
 #PrivateUsers=true
 #PrivateDevices=true
-#BindReadOnlyPaths=__INSTALL_DIR__
-#BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
+BindReadOnlyPaths=__INSTALL_DIR__
+BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
 LockPersonality=yes
 MemoryDenyWriteExecute=true
 PrivateMounts=true