From f308179daab3e8dbb5dbdae5bd0fd11868d9f66a Mon Sep 17 00:00:00 2001
From: Thomas <51749973+Thovi98@users.noreply.github.com>
Date: Wed, 8 Nov 2023 16:52:55 +0100
Subject: [PATCH] Update bookwyrm-server.service

---
 conf/bookwyrm-server.service | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/conf/bookwyrm-server.service b/conf/bookwyrm-server.service
index 89459f2..eea6724 100644
--- a/conf/bookwyrm-server.service
+++ b/conf/bookwyrm-server.service
@@ -11,15 +11,15 @@ WorkingDirectory=__INSTALL_DIR__/
 EnvironmentFile=__INSTALL_DIR__/.env
 ExecStart=__INSTALL_DIR__/venv/bin/gunicorn bookwyrm.wsgi:application --bind 127.0.0.1:__PORT__
 
-#ProtectSystem=strict
+ProtectSystem=strict
 ProtectHome=tmpfs
 InaccessiblePaths=-/media -/mnt -/srv
 PrivateTmp=yes
 #TemporaryFileSystem=/var /run
 #PrivateUsers=true
 #PrivateDevices=true
-BindReadOnlyPaths=__INSTALL_DIR__
-BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
+#BindReadOnlyPaths=__INSTALL_DIR__
+#BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
 LockPersonality=yes
 MemoryDenyWriteExecute=true
 PrivateMounts=true