On Fri, Aug 11, 2023 at 03:02:42AM -0700, Karol wrote:
> I wonder if it is safe to run angular from root? Shouldn't a dedicated user 
> be created like in apache2 www-data? Does anyone have any good practices on 
> how to run angular safely? Or maybe running pm2 from root is ok?

I always prefer to run a service in its own account, unless it
*requires* root.

I created a user 'scholarworks' (since our repository is named
"ScholarWorks") and configured the PM2 startup script to run PM2 as
that user.  Details will depend on your OS -- here we use Gentoo
Linux, which uses OpenRC for startup, so I have a configuration script
for this in '/etc/conf.d/'.

One minor unpleasant result is that, if I want to interact with that
PM2 instance, I have to 'su' to its account.  Not a big deal, just an
annoyance that I have to remember.

-- 
Mark H. Wood
Lead Technology Analyst

University Library
Indiana University - Purdue University Indianapolis
755 W. Michigan Street
Indianapolis, IN 46202
317-274-0749
www.ulib.iupui.edu

-- 
All messages to this mailing list should adhere to the Code of Conduct: 
https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/dspace-tech/ZNZD1Rj-NRc9k3_6%40IUPUI.Edu.

Attachment: signature.asc
Description: PGP signature

Reply via email to