The app never read the LLM_PROXY__CONFIG_PATH env var, so the systemd service couldn't find /etc/llm-proxy/config.toml and fell back to ./data/llm_proxy.db (owned by root, readonly for llmproxy user). - Add LLM_PROXY__CONFIG_PATH support to config loader (checks env var before falling back to ./config.toml) - Add LLM_PROXY__DATABASE__PATH to service env so the DB path always resolves to /var/lib/llm-proxy/llm_proxy.db regardless of config