Merge branch 'testing' into update-to-220901

README.md

@@ -27,7 +27,7 @@ PhotoPrism® is an AI-Powered Photos App for the Decentralized Web. It makes use
 - Automatic classification of pictures based on their content and location
 
 
-**Shipped version:** 2022.07.30~ynh2
+**Shipped version:** 2022.07.30~ynh3
 
 
 **Demo:** https://demo-fr.photoprism.app

README_fr.md

@@ -27,7 +27,7 @@ PhotoPrism® est une application de photos alimentée par l'IA pour le Web déce
 - Classification automatique des photos en fonction de leur contenu et de leur emplacement
 
 
-**Version incluse :** 2022.07.30~ynh2
+**Version incluse :** 2022.07.30~ynh3
 
 
 **Démo :** https://demo-fr.photoprism.app

conf/systemd.service

@@ -6,8 +6,19 @@ After=network.target
 Type=simple
 User=__APP__
 Group=__APP__
+
+# Have all filesystem look like invisible for the service
+TemporaryFileSystem=/:ro
+
+# Manually mount what is needed for the service to run
+# Ref: https://www.sherbers.de/use-temporaryfilesystem-to-hide-files-or-directories-from-systemd-services/
+
+BindReadOnlyPaths=/lib/ /lib64/ /usr/lib/ /usr/lib64/ /etc/ld.so.cache /etc/ld.so.conf /etc/ld.so.conf.d/ /etc/bindresvport.blacklist /usr/share/zoneinfo/ /usr/share/locale/ /etc/localtime /usr/share/common-licenses/ /etc/ssl/certs/ /etc/alternatives/
+BindReadOnlyPaths=/dev/log /run/systemd/journal/socket /run/systemd/journal/stdout /run/systemd/notify
+BindPaths=/var/www/photoprism /var/www/photoprism/live/bin /home/yunohost.app/photoprism /usr /etc /var /home /dev /etc /usr /media /mnt /opt /proc /run /srv /sys /tmp
+
 EnvironmentFile=__FINALPATH__/.env
-WorkingDirectory=__FINALPATH__/
+WorkingDirectory=__FINALPATH__/live/bin
 ExecStart=__FINALPATH__/live/bin/photoprism --trace start
 StandardOutput=append:/var/log/__APP__/__APP__.log
 StandardError=inherit

manifest.json

@@ -21,7 +21,7 @@
         "name": "Thovi98"
     },
     "requirements": {
-        "yunohost": ">= 11.0.7"
+        "yunohost": ">= 11.0.9.11"
     },
     "multi_instance": true,
     "services": [