search

rapiz1 / rathole

A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.
Apache License 2.0
8.82k stars 441 forks source link

Docs/non root user with systemd #269

Closed boenshao closed 12 months ago

boenshao commented 12 months ago

Related to https://github.com/rapiz1/rathole/pull/186#issuecomment-1611724826.

Quote me,

A typical use case is storing configurations and tokens under /etc/rathole/xxx.toml with permission set to 0600, that is, only the root user (or owner) can read the file. Preventing arbitrary users on the system from accessing the token. Yet with DynamicUser=yes the rathole process spawned by systemd won't have the privilege to read the file either.

This PR update the document with a more comprehensive systemd setup without root privilege.