diff --git a/conf/systemd.service b/conf/systemd.service index a1b91b8..d65ee92 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -8,6 +8,9 @@ Group=__APP__ WorkingDirectory=__INSTALL_DIR__/ ExecStart=__INSTALL_DIR__/venv/bin/python3 __INSTALL_DIR__/Headphones.py --config /etc/__APP__/headphones.ini --datadir __DATA_DIR__ --nolaunch +# Allow headphones to write to its configuration directory despite ProtectSystem +ReadWritePaths=/etc/__APP__ + # Sandboxing options to harden security # Depending on specificities of your service/app, you may need to tweak these # .. but this should be a good baseline