From 962adc299471674b20bab275f1982d324846acc1 Mon Sep 17 00:00:00 2001
From: Revertron <105154+Revertron@users.noreply.github.com>
Date: Sun, 18 Jan 2026 12:50:51 +0100
Subject: [PATCH] Update yggdrasil.service.debian (#1290)

Can't start service without reading config.
Without explicit allow directive it can't read it.
---
 contrib/systemd/yggdrasil.service.debian | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/contrib/systemd/yggdrasil.service.debian b/contrib/systemd/yggdrasil.service.debian
index 0f3c7a8d..51b148dc 100644
--- a/contrib/systemd/yggdrasil.service.debian
+++ b/contrib/systemd/yggdrasil.service.debian
@@ -12,6 +12,7 @@ ProtectSystem=strict
 NoNewPrivileges=true
 RuntimeDirectory=yggdrasil
 ReadWritePaths=/var/run/yggdrasil/ /run/yggdrasil/
+ReadOnlyPaths=/etc/yggdrasil
 SyslogIdentifier=yggdrasil
 CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
 AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
@@ -22,4 +23,4 @@ Restart=always
 TimeoutStopSec=5
 
 [Install]
-WantedBy=multi-user.target
\ No newline at end of file
+WantedBy=multi-user.target