From b92931f6ee614d0f7ed508f2455377e96c8eee56 Mon Sep 17 00:00:00 2001
From: vhsdream <punk.sand7393@fastmail.com>
Date: Thu, 15 Jan 2026 22:50:31 -0500
Subject: [PATCH] nextExplorer: disable shell for user; fix version display

---
 ct/nextexplorer.sh              | 1 +
 install/nextexplorer-install.sh | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/ct/nextexplorer.sh b/ct/nextexplorer.sh
index 6b2b651b4..27fcf564f 100644
--- a/ct/nextexplorer.sh
+++ b/ct/nextexplorer.sh
@@ -54,6 +54,7 @@ function update_script() {
     mv backend/{node_modules,src,package.json} "$APP_DIR"
     mv frontend/dist/ "$APP_DIR"/src/public
     chown -R explorer:explorer "$APP_DIR" /etc/nextExplorer
+    sed -i "\|version|s|$(jq -cr '.version' ${APP_DIR}/package.json)|$(cat ~/.nextexplorer)|" "$APP_DIR"/package.json
     msg_ok "Updated nextExplorer"
 
     msg_info "Starting nextExplorer"
diff --git a/install/nextexplorer-install.sh b/install/nextexplorer-install.sh
index 8ed03263a..940cdec67 100644
--- a/install/nextexplorer-install.sh
+++ b/install/nextexplorer-install.sh
@@ -119,8 +119,9 @@ SHARES_ENABLED=true
 # SHARES_ALLOW_ANONYMOUS=true
 EOF
 chmod 600 /etc/nextExplorer/.env
-$STD useradd -U -s /bin/bash -m -d /home/explorer explorer
+$STD useradd -U -s /usr/sbin/nologin -m -d /home/explorer explorer
 chown -R explorer:explorer "$APP_DIR" /etc/nextExplorer
+sed -i "\|version|s|$(jq -cr '.version' ${APP_DIR}/package.json)|$(cat ~/.nextexplorer)|" "$APP_DIR"/package.json
 msg_ok "Configured nextExplorer"
 
 msg_info "Creating nextExplorer Service"
@@ -131,6 +132,8 @@ After=network.target
 
 [Service]
 Type=simple
+User=explorer
+Group=explorer
 WorkingDirectory=/opt/nextExplorer/app
 EnvironmentFile=/etc/nextExplorer/.env
 ExecStart=/usr/bin/node ./src/app.js