v0.1.0-2 changelog

contrib/navidrome-uploader.service

@@ -9,7 +9,7 @@ Group=navidrome-uploader
 WorkingDirectory=/opt/navidrome-uploader
 Environment="PATH=/opt/navidrome-uploader/venv/bin"
 EnvironmentFile=/etc/default/navidrome-uploader/.env
-ExecStart=/opt/navidrome-uploader/venv/bin/gunicorn -c gunicorn.conf.py main:app
+ExecStart=/opt/navidrome-uploader/venv/bin/gunicorn --no-control-socket -c gunicorn.conf.py main:app
 Restart=on-failure
 RestartSec=30
 

debian/changelog

@@ -1,3 +1,15 @@
+navidrome-uploader (0.1.0-2) unstable; urgency=high
+
+  * Run pip install stage as navidrome-uploader user instead of root
+
+ -- Arian Nasr <arian@2ari.ca>  Tue, 14 Apr 2026 12:11:00 -0400
+
+navidrome-uploader (0.1.0-1) unstable; urgency=medium
+
+  * Disable gunicorn control socket in systemd service unit
+
+ -- Arian Nasr <arian@2ari.ca>  Thu, 09 Apr 2026 01:58:00 -0400
+
 navidrome-uploader (0.1.0) unstable; urgency=medium
 
   * Add Debian packaging with systemd service integration and venv setup.

debian/navidrome-uploader.postinst

@@ -3,12 +3,15 @@ set -e
 
 APP_DIR="/opt/navidrome-uploader"
 VENV_DIR="${APP_DIR}/venv"
+APP_USER="navidrome-uploader"
 
 case "$1" in
   configure)
-        python3 -m venv "${VENV_DIR}"
-        "${VENV_DIR}/bin/pip" install --no-cache-dir --upgrade pip
-        "${VENV_DIR}/bin/pip" install --no-cache-dir -r "${APP_DIR}/requirements.txt"
+    chown -R "$APP_USER:$APP_USER" "$APP_DIR"
+
+    runuser -u "$APP_USER" -- python3 -m venv "$VENV_DIR"
+    runuser -u "$APP_USER" -- "$VENV_DIR/bin/pip" install --no-cache-dir --upgrade pip
+    runuser -u "$APP_USER" -- "$VENV_DIR/bin/pip" install --no-cache-dir -r "$APP_DIR/requirements.txt"
 
     if command -v systemctl >/dev/null 2>&1; then
       systemctl daemon-reload || true
@@ -20,3 +23,4 @@ esac
 
 exit 0
 
+