s

d2ypp2/scripts/linux/lib/common.sh

@@ -776,6 +776,7 @@ ensure_runtime_dirs_owned_by_live() {
     backup_config \
     .pm2 \
     .process_runner \
+    web-console \
     web-console/out \
     web-console/.next \
     web-console/node_modules \
@@ -784,6 +785,7 @@ ensure_runtime_dirs_owned_by_live() {
     path="$ROOT_DIR/$rel"
     mkdir -p "$path"
     chown -R live:live "$path" 2>/dev/null || true
+    chmod -R u+rwX,g+rwX "$path" 2>/dev/null || true
   done
 }
 
@@ -952,11 +954,14 @@ StartLimitIntervalSec=0
 
 [Service]
 User=live
+PermissionsStartOnly=true
 WorkingDirectory=$ROOT_DIR
 Environment=HOST=0.0.0.0
 Environment=PORT=$PORT
 Environment=LIVE_NOFILE_SOFT=$LIVE_NOFILE_SOFT
 LimitNOFILE=$LIVE_NOFILE_SOFT
+ExecStartPre=/usr/bin/install -d -o live -g live $ROOT_DIR/config $ROOT_DIR/logs $ROOT_DIR/downloads $ROOT_DIR/backup $ROOT_DIR/backup_config $ROOT_DIR/.pm2 $ROOT_DIR/.process_runner $ROOT_DIR/web-console $ROOT_DIR/services/neko/data
+ExecStartPre=/bin/chown -R live:live $ROOT_DIR/config $ROOT_DIR/logs $ROOT_DIR/downloads $ROOT_DIR/backup $ROOT_DIR/backup_config $ROOT_DIR/.pm2 $ROOT_DIR/.process_runner $ROOT_DIR/web-console $ROOT_DIR/services/neko/data
 ExecStart=$ROOT_DIR/start.sh
 Restart=always
 RestartSec=5