git pull inside the deploy needs to update .git/FETCH_HEAD, but ProtectSystem=full makes /etc read-only. ReadWritePaths=/etc/caddy opens just the repo directory.
347 B
347 B
git pull inside the deploy needs to update .git/FETCH_HEAD, but ProtectSystem=full makes /etc read-only. ReadWritePaths=/etc/caddy opens just the repo directory.