From b8605efaf66e61e1318afbffd2afc9d3a9c55735 Mon Sep 17 00:00:00 2001
From: mirivlad <mirvtop@yandex.ru>
Date: Wed, 25 Feb 2026 15:08:07 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=D0=B4=D0=BE=D0=B1=D0=B0=D0=B2=D0=B8?=
 =?UTF-8?q?=D1=82=D1=8C=20ReadWritePaths=20=D0=B2=20systemd=20=D1=81=D0=B5?=
 =?UTF-8?q?=D1=80=D0=B2=D0=B8=D1=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Добавить ReadWritePaths=%WORKDIR% для разрешения записи в БД
- Исправляет ошибку 'attempt to write a readonly database' от ChromaDB

Co-authored-by: Qwen-Coder <qwen-coder@alibabacloud.com>
---
 telegram-bot.service | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/telegram-bot.service b/telegram-bot.service
index 8d56160..a91adf6 100644
--- a/telegram-bot.service
+++ b/telegram-bot.service
@@ -14,11 +14,12 @@ StandardOutput=journal
 StandardError=journal
 SyslogIdentifier=telegram-bot
 
-# Security hardening
+# Security hardening с исключениями для работы бота
 NoNewPrivileges=true
 ProtectSystem=strict
 ProtectHome=read-only
 PrivateTmp=true
+ReadWritePaths=%WORKDIR%
 
 [Install]
 WantedBy=multi-user.target