fix(perms): Run unicorn as non-root user (#159)

* fix(perms): Run unicorn as non-root user * Update src/charm.py Co-authored-by: Niels Robin-Aubertin <[email protected]> --------- Co-authored-by: Niels Robin-Aubertin <[email protected]>
canonical · Dec 14, 2023 · 7ef2666 · 7ef2666
1 parent 505da91
commit 7ef2666
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/charm.py b/src/charm.py
@@ -439,7 +439,8 @@ def _create_layer_config(self) -> ops.pebble.LayerDict:
                 SERVICE_NAME: {
                     "override": "replace",
                     "summary": "Discourse web application",
-                    "command": f"sh -c '{SCRIPT_PATH}/app_launch.sh'",
+                    "command": f"{SCRIPT_PATH}/app_launch.sh",
+                    "user": "_daemon_",
                     "startup": "enabled",
                     "environment": self._create_discourse_environment_settings(),
                 }