deploy: keep app data in /opt/bike_admin/data (ReadWritePaths)

Match the live volundr unit: drop StateDirectory=/var/lib/bike_admin in
favour of ReadWritePaths=/opt/bike_admin/data. systemd requires the
ReadWritePaths target to exist before the service starts, so the unit
documents the one-time install -d prerequisite.

deploy/bike_admin.service

@@ -21,6 +21,10 @@ NoNewPrivileges=true
 PrivateTmp=true
 ProtectSystem=full
 ProtectHome=true
+# App data lives next to the checkout at /opt/bike_admin/data (created by the
+# app on startup). systemd requires the ReadWritePaths target to exist before
+# it starts the service, so pre-create it with:
+#   sudo install -d -o bike -g bike /opt/bike_admin/data
 ReadWritePaths=/opt/bike_admin/data
 
 [Install]

deploy/env.production.example

@@ -22,4 +22,4 @@ BIKE_ADMIN_BIND_PORT=8000
 # BIKE_ADMIN_SERVICE_DUE_SOON_MILES=200   # service "book soon" lead time
 # BIKE_ADMIN_RENEWAL_DUE_SOON_DAYS=60     # MOT/insurance "due soon" lead time
 # BIKE_ADMIN_RENEWAL_MONTHS=12            # MOT/insurance validity (months)
-# BIKE_ADMIN_DATA_DIR=/opt/bike_admin/data
+# BIKE_ADMIN_DATA_DIR=/opt/bike_admin/data  # (defaults to <WorkingDirectory>/data; matches the systemd unit)