From 1a2bbb06bb932bacae1f29324ec7a4c248aa2e65 Mon Sep 17 00:00:00 2001
From: "CanbiZ (MickLesk)" <47820557+MickLesk@users.noreply.github.com>
Date: Fri, 6 Nov 2026 23:46:31 +0100
Subject: [PATCH] fix(nexterm): keep the extracted app out of the /tmp cleanup
 (#18501)

The server unpacks its frontend into /tmp/nexterm-sea-*. systemd-tmpfiles removes it after 10 days while the process keeps running, and every page returns 404. Fixes #18488.
---
 ct/nexterm.sh              | 3 +++
 install/nexterm-install.sh | 1 +
 2 files changed, 4 insertions(+)

diff --git a/ct/nexterm.sh b/ct/nexterm.sh
index 513c7538f..42e345edf 100644
--- a/ct/nexterm.sh
+++ b/ct/nexterm.sh
@@ -31,6 +31,8 @@ function update_script() {
     exit
   fi
 
+  echo "x /tmp/nexterm-sea-*" >/etc/tmpfiles.d/nexterm.conf
+
   if check_for_gh_release "nexterm-engine" "gnmyt/Nexterm"; then
     msg_info "Stopping nexterm-engine"
     systemctl stop nexterm-engine
@@ -46,6 +48,7 @@ function update_script() {
   if check_for_gh_release "nexterm-server" "gnmyt/Nexterm"; then
     msg_info "Stopping nexterm-server"
     systemctl stop nexterm-server
+    rm -rf /tmp/nexterm-sea-*
     msg_ok "Stopped nexterm-server"
 
     fetch_and_deploy_gh_release "nexterm-server" "gnmyt/Nexterm" "singlefile" "latest" "/opt/nexterm/server" "nexterm-server-linux-$(arch_resolve "x64" "arm64")"
diff --git a/install/nexterm-install.sh b/install/nexterm-install.sh
index 1ef0ecfe8..ae2405137 100644
--- a/install/nexterm-install.sh
+++ b/install/nexterm-install.sh
@@ -33,6 +33,7 @@ LOCAL_ENGINE_TOKEN=${LOCAL_ENGINE_TOKEN}
 ENCRYPTION_KEY=${ENCRYPTION_KEY}
 EOF
 chmod 0640 /etc/nexterm-engine/config.yaml /etc/nexterm-server/server.env
+echo "x /tmp/nexterm-sea-*" >/etc/tmpfiles.d/nexterm.conf
 msg_ok "Configured Nexterm"
 
 msg_info "Creating Services"