Do not run the app server as root.

diff --git a/pr0n.service b/pr0n.service
index a3f207efa90936df6504d18ac54dd18c2a8c5984..491d7bd31e7b811db8f1c4dea2826f876b40f8eb 100644 (file)
--- a/pr0n.service
+++ b/pr0n.service
@@ -7,6 +7,7 @@ ExecStart=/usr/bin/start_server --port=127.0.0.1:5015 -- plackup -I/srv/pr0n.ses
 Type=simple
 Restart=on-failure
 ExecReload=/bin/kill -HUP $MAINPID
+User=pr0n
 
 [Install]
 WantedBy=multi-user.target