examples/*.service: avoid `nobody' user on systemd

systemd complains about `User=nobody' since `nobody' has access
to all files which can't be mapped to a valid UID.  We'll also
switch to `Group=ssl-cert' since that ought to be able to read
TLS certificates.

diff --git a/examples/public-inbox-httpd@.service b/examples/public-inbox-httpd@.service
index a56f6f81edd94fa4e8b0f6f00ce046c5074a9a7c..11859198e49497d106b7eccfc4969cd5c4e65408 100644 (file)
--- a/examples/public-inbox-httpd@.service
+++ b/examples/public-inbox-httpd@.service
@@ -32,8 +32,8 @@ NonBlocking = true
 Sockets = public-inbox-httpd.socket
 
 KillSignal = SIGQUIT
-User = nobody
-Group = nogroup
+User = news
+Group = ssl-cert
 ExecReload = /bin/kill -HUP $MAINPID
 TimeoutStopSec = 86400
 KillMode = process

diff --git a/examples/public-inbox-imapd@.service b/examples/public-inbox-imapd@.service
index 8f5b79f29572a42c4cb36265290b811af1d8f00a..801046056ca3ff38f2f5384ba6ce719795e1a131 100644 (file)
--- a/examples/public-inbox-imapd@.service
+++ b/examples/public-inbox-imapd@.service
@@ -32,7 +32,7 @@ NonBlocking = true
 Sockets = public-inbox-imapd.socket
 
 KillSignal = SIGQUIT
-User = nobody
+User = news
 Group = ssl-cert
 ExecReload = /bin/kill -HUP $MAINPID
 TimeoutStopSec = 86400

diff --git a/examples/public-inbox-nntpd@.service b/examples/public-inbox-nntpd@.service
index 11bc223f92a25cd85cdb9784d2e40b3e49020920..24f9ca730ed7060e7bee3f5f6fd163beb1dca521 100644 (file)
--- a/examples/public-inbox-nntpd@.service
+++ b/examples/public-inbox-nntpd@.service
@@ -32,7 +32,7 @@ NonBlocking = true
 Sockets = public-inbox-nntpd.socket
 
 KillSignal = SIGQUIT
-User = nobody
+User = news
 Group = ssl-cert
 ExecReload = /bin/kill -HUP $MAINPID
 TimeoutStopSec = 86400