Another fix for missing permissions

Author: ljfp

README.md

@@ -51,7 +51,8 @@ Feel free to build on this foundation for richer APIs or interfaces.
 The `deploy/deploy.sh` script provisions the application on a Linux host using `systemd`. It:
 
 - Syncs the repository into `/opt/nasa-sky-app/app` (configurable with `APP_ROOT`).
-- Creates a virtual environment and installs dependencies.
+- Ensures `/opt/nasa-sky-app` exists with the proper ownership, then syncs code and creates a
+   virtual environment for dependencies.
 - Generates a `systemd` unit that runs Uvicorn on port `80` by default.
 - Enables and restarts the service.
 

deploy/deploy.sh

@@ -56,7 +56,12 @@ if ! command -v "${PYTHON_BIN}" >/dev/null 2>&1; then
   exit 1
 fi
 
-mkdir -p "${APP_DIR}"
+if [ ! -d "${APP_ROOT}" ]; then
+  ${SUDO_BIN} mkdir -p "${APP_ROOT}"
+fi
+${SUDO_BIN} mkdir -p "${APP_DIR}" "${VENV_DIR}"
+${SUDO_BIN} chown -R "${SERVICE_USER}:${SERVICE_GROUP}" "${APP_ROOT}"
+
 rsync -a --delete \
   --exclude ".git" \
   --exclude ".venv" \