git pull inside the deploy needs to update .git/FETCH_HEAD, but ProtectSystem=full makes /etc read-only. ReadWritePaths=/etc/caddy opens just the repo directory.
git pull inside the deploy needs to update .git/FETCH_HEAD, but ProtectSystem=full makes /etc read-only. ReadWritePaths=/etc/caddy opens just the repo directory.