Drop root privileges in systemd unit (#402)

2024-05-06 14:53:04 +02:00
parent 8c224290aa
commit b5a5858ec2
2 changed files with 6 additions and 1 deletions
--- a/resources/systemd/stalwart-mail.service
+++ b/resources/systemd/stalwart-mail.service
@@ -14,6 +14,9 @@ RestartSec=5
 ExecStart=__PATH__/bin/stalwart-mail --config=__PATH__/etc/config.toml
 PermissionsStartOnly=true
 SyslogIdentifier=stalwart-mail
+User=stalwart-mail
+Group=stalwart-mail
+AmbientCapabilities=CAP_NET_BIND_SERVICE

 [Install]
 WantedBy=multi-user.target