steve dddff10b99 agent unit: allow writes to /usr/local/bin for self-update ...

Smoke caught this: ProtectSystem=full mounts /usr read-only so the
agent couldn't write its own .new staging file or atomic-rename over
the running binary. Adding /usr/local/bin to ReadWritePaths is the
minimum diff that lets self-update work; the whole-dir grant is
required because os.Rename needs write on the parent directory.

2026-05-06 22:32:50 +01:00

..

install

agent unit: allow writes to /usr/local/bin for self-update

2026-05-06 22:32:50 +01:00

docker-compose.yml

p5-07: reference deployment (server-only compose + reverse-proxy docs)

2026-05-05 17:15:00 +01:00

Dockerfile.server

testing: bootstrap UI, agent reliability, NS-01..04 + alert username

2026-05-05 22:03:15 +01:00