mwiegand 9985ecc56c chore(deploy): cleanup left4me-web hardening + docs for kernel overlayfs ... Drop MountFlags=shared (the assumption that it propagated fuse mounts to host was incorrect on systemd 257 with ProtectSystem+ReadWritePaths). Restore PrivateTmp=true (was dropped in 593611e for fuse propagation that did not work). Rewrite the comment block to describe the new model: mounts go through the left4me-overlay helper which nsenters into PID 1's mount namespace, so the unit's mount-ns layout is no longer load-bearing. Update the three user-facing READMEs (root, l4d2host, deploy) to drop fuse-overlayfs / fusermount3 prereqs and call out the kernel overlayfs mount path through the privileged helper. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-08 12:29:49 +02:00
..
left4me-refresh-global-overlays.service	feat(l4d2-web): managed global map overlays with daily refresh	2026-05-08 08:05:14 +02:00
left4me-refresh-global-overlays.timer	feat(l4d2-web): managed global map overlays with daily refresh	2026-05-08 08:05:14 +02:00
left4me-server@.service	feat(deploy): add production-like test deployment	2026-05-06 19:30:10 +02:00
left4me-web.service	chore(deploy): cleanup left4me-web hardening + docs for kernel overlayfs	2026-05-08 12:29:49 +02:00