3 Commits

Author	SHA1	Message	Date
ryan	1eff7878a1	prettier	2026-07-13 15:10:28 +08:00
ryan	895dec208f	fix(agent): write nginx pid and temp dirs under data_dir for non-root runtime ... OpenResty running as openflare can no longer write pid or client/proxy temp paths under the OpenResty install prefix. Templates and apply-time rendering now use __OPENFLARE_PID_PATH__ and __OPENFLARE_NGINX_CACHE_DIR__ under data_dir/var/run and data_dir/var/cache/nginx, with legacy pid path patched at apply. Consolidate runtimeuser path helpers into the main package file so IDEs resolve references across build tags.	2026-06-21 14:40:10 +08:00
ryan	d3777eac2d	fix(agent): unify agent and openresty runtime user as openflare ... Introduce the shared openflare service account for the agent process and OpenResty workers, normalize data_dir ownership on startup, and ensure managed paths are chowned with 0755/0644 during sync and apply. Docker entrypoint fixes volume ownership before dropping privileges; local systemd install runs the service as openflare with CAP_NET_BIND_SERVICE.	2026-06-21 14:25:20 +08:00