mirror of
https://github.com/stalwartlabs/mail-server.git
synced 2024-10-23 06:57:26 +00:00
Drop root privileges in systemd unit (#402)
This commit is contained in:
parent
8c224290aa
commit
b5a5858ec2
2 changed files with 6 additions and 1 deletions
|
@ -115,7 +115,6 @@ main() {
|
|||
# Create service file
|
||||
say "🚀 Starting service..."
|
||||
if [ "${_os}" = "linux" ]; then
|
||||
printf "\n[server.run-as]\nuser = \"stalwart-mail\"\ngroup = \"stalwart-mail\"\n" >> "$_dir/etc/config.toml"
|
||||
create_service_linux "$_dir"
|
||||
elif [ "${_os}" = "macos" ]; then
|
||||
create_service_macos "$_dir"
|
||||
|
@ -148,6 +147,9 @@ RestartSec=5
|
|||
ExecStart=__PATH__/bin/stalwart-mail --config=__PATH__/etc/config.toml
|
||||
PermissionsStartOnly=true
|
||||
SyslogIdentifier=stalwart-mail
|
||||
User=stalwart-mail
|
||||
Group=stalwart-mail
|
||||
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
|
|
@ -14,6 +14,9 @@ RestartSec=5
|
|||
ExecStart=__PATH__/bin/stalwart-mail --config=__PATH__/etc/config.toml
|
||||
PermissionsStartOnly=true
|
||||
SyslogIdentifier=stalwart-mail
|
||||
User=stalwart-mail
|
||||
Group=stalwart-mail
|
||||
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
|
Loading…
Reference in a new issue