From 68a0901489c374edf483b2deb3d77c694b46a29d Mon Sep 17 00:00:00 2001
From: mic0 <mic0@mic0.dev>
Date: Wed, 19 Nov 2025 15:40:22 +0100
Subject: [PATCH] /srv/ -> /usr/local/bin

---
 README.md       |  2 +-
 applications.md | 12 +++++++++---
 systemd.md      |  4 ++--
 3 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 67a2f1a..fb3c50d 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,7 @@ Prepare a new machine for use with an `admin` user. Lock out everything but SSH
 ## [Installing aplications and build tools](applications.md)
 
 Download packages to build future applications such as NodeJS / Rust.
-Set up your apps in `/srv/` partition.
+Set up your apps on `/usr/local/bin/` path.
 
 ## [Firewall (opening/checking ports)](firewall.md)
 
diff --git a/applications.md b/applications.md
index e85c0aa..446b73f 100644
--- a/applications.md
+++ b/applications.md
@@ -1,15 +1,21 @@
 # Installing applications and their dependencies
 
-## Put your apps in `/srv/`
+## Put your apps in `/usr/local/bin/`
 
 Do not just install stuff in `/home/` dirs.
 
-Rather `git clone` the repos to your home and then move it to `/srv/` partition.
+Rather `git clone` the repos to your home and then move it to `/usr/local/bin/` partition.
+
+If SELinux is turned on you might also wanna do `restorecon` to let `systemctl` service be able to use it.
 
 ```sh
-sudo mv your_repo /srv/your_repo
+sudo mv your_repo /usr/local/bin/your_repo
+restorecon -Rv /usr/local/bin/your_repo
 ```
 
+This will reset
+
+
 This way other users of the system can also access and use your app without letting them into your $HOME.
 
 ## Installing NodeJS
diff --git a/systemd.md b/systemd.md
index 01b6f65..5ddd923 100644
--- a/systemd.md
+++ b/systemd.md
@@ -26,9 +26,9 @@ Wants=network.target
 
 [Service]
 # Set the working directory where your binary resides
-WorkingDirectory=/srv/YOUR_PATH
+WorkingDirectory=/usr/local/bin/YOUR_PATH
 # Absolute path to your binary
-ExecStart=/srv/YOUR_PATH/target/release/BINARY_NAME
+ExecStart=/usr/local/bin/YOUR_PATH/target/release/BINARY_NAME
 
 # Ensure the service restarts on failure
 Restart=always