Tags: #systemd

You hardened your systemd service with ProtectHome=yes. Your Go service spawns a subprocess. It crashes with EACCES on a path you never touched.

Running a self-managed VPS means bots will find you within hours. Here's the layered setup I use to sleep well anyway.

The systemd options that actually matter for a Go backend and Node.js frontend: unit file anatomy, hardening directives, and the gotchas that burn you.