From f9f0446c125bd9bb65dfb4965049e6a62d6b5727 Mon Sep 17 00:00:00 2001
From: shop <shop@localhost>
Date: Sun, 17 May 2026 14:35:33 +0300
Subject: [PATCH] =?UTF-8?q?docs:=20=D0=BF=D0=BE=D0=B4=D1=81=D0=BA=D0=B0?=
 =?UTF-8?q?=D0=B7=D0=BA=D0=B8=20sudoers=20=D0=BD=D0=B0=20=D1=81=D1=82?=
 =?UTF-8?q?=D1=80=D0=B0=D0=BD=D0=B8=D1=86=D0=B5=20=D0=BE=D0=B1=D0=BD=D0=BE?=
 =?UTF-8?q?=D0=B2=D0=BB=D0=B5=D0=BD=D0=B8=D1=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 src/views/admin/system.ejs | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/src/views/admin/system.ejs b/src/views/admin/system.ejs
index 83a8fd3..ac0f99a 100644
--- a/src/views/admin/system.ejs
+++ b/src/views/admin/system.ejs
@@ -107,13 +107,15 @@
 
 <section class="card admin-system__help muted">
   <h2>Настройка сервера</h2>
-  <p>В <code>.env</code>: <code>SHOP_ROOT=/opt/shop</code>, <code>ADMIN_UPDATE_ENABLED=1</code>.</p>
-  <p>Если служба работает от <code>www-data</code>, добавьте в sudoers (от root):</p>
-  <pre class="admin-system__pre">www-data ALL=(root) NOPASSWD: <%= git.shopRoot || '/opt/shop' %>/scripts/admin-web-update.sh</pre>
-  <p>И в .env: <code>ADMIN_UPDATE_USE_SUDO=1</code></p>
-  <p>При ошибке <code>dubious ownership</code> один раз на сервере:</p>
-  <pre class="admin-system__pre">git config --global --add safe.directory <%= git.shopRoot || '/opt/shop/shop10' %></pre>
-  <p class="muted">(для пользователя службы shop, обычно <code>www-data</code>)</p>
+  <p>В <code>.env</code>:</p>
+  <pre class="admin-system__pre">SHOP_ROOT=<%= git.shopRoot || '/opt/shop/shop10' %>
+ADMIN_UPDATE_ENABLED=1
+ADMIN_UPDATE_USE_SUDO=1
+SHOP_GIT_USER=<%= git.repoOwner || 'root' %></pre>
+  <p>Sudoers для <code>www-data</code> (от root):</p>
+  <pre class="admin-system__pre">www-data ALL=(root) NOPASSWD: <%= git.shopRoot || '/opt/shop/shop10' %>/scripts/admin-web-update.sh
+www-data ALL=(<%= git.repoOwner || 'root' %>) NOPASSWD: /usr/bin/git</pre>
+  <p class="muted">«Проверить на Git» — через <code>ls-remote</code> (без записи в .git). Pull — от владельца каталога.</p>
 </section>
 
 <%- include('../partials/layout-end') %>