fix(deploy): конфиг в /opt/security-alert-center/config (sac:sac)

Убирает ошибку Permission denied при каталоге /etc root:root.

deploy/.env.example

@@ -1,5 +1,5 @@
 # Только для Docker Compose (см. docs/install-ubuntu-24.04-docker.md).
-# Production native: deploy/env.native.example → /etc/security-alert-center/sac-api.env
+# Production native: deploy/env.native.example → /opt/security-alert-center/config/sac-api.env
 
 # PostgreSQL
 POSTGRES_USER=sac

deploy/README.md

@@ -3,7 +3,7 @@
 ## Production (native) — основной путь
 
 1. [docs/install-ubuntu-24.04-native.md](../docs/install-ubuntu-24.04-native.md)
-2. `deploy/env.native.example` → `/etc/security-alert-center/sac-api.env`
+2. `deploy/env.native.example` → `/opt/security-alert-center/config/sac-api.env`
 3. `deploy/systemd/sac-api.service` → `/etc/systemd/system/`
 4. `deploy/nginx/sac.conf.example` → `/etc/nginx/sites-available/sac`
 

deploy/env.native.example

@@ -1,6 +1,6 @@
-# Native (systemd): скопировать в /etc/security-alert-center/sac-api.env
-# sudo chown root:sac /etc/security-alert-center/sac-api.env
-# sudo chmod 640 /etc/security-alert-center/sac-api.env
+# Native: /opt/security-alert-center/config/sac-api.env
+# sudo chown sac:sac /opt/security-alert-center/config/sac-api.env
+# sudo chmod 600 /opt/security-alert-center/config/sac-api.env
 
 DATABASE_URL=postgresql+psycopg2://sac:CHANGE_ME_POSTGRES_PASSWORD@127.0.0.1:5432/sac
 

deploy/systemd/sac-api.service

@@ -10,7 +10,7 @@ Type=simple
 User=sac
 Group=sac
 WorkingDirectory=/opt/security-alert-center/backend
-EnvironmentFile=/etc/security-alert-center/sac-api.env
+EnvironmentFile=/opt/security-alert-center/config/sac-api.env
 Environment=PYTHONPATH=/opt/security-alert-center/backend
 ExecStart=/opt/security-alert-center/backend/.venv/bin/uvicorn app.main:app --host 127.0.0.1 --port 8000
 Restart=on-failure