From 7ef26665b413ac879365af32f7179a3a0eaca328 Mon Sep 17 00:00:00 2001
From: Mariyan Dimitrov <mariyan.dimitrov@canonical.com>
Date: Thu, 14 Dec 2023 13:00:38 +0200
Subject: [PATCH] fix(perms): Run unicorn as non-root user (#159)

* fix(perms): Run unicorn as non-root user

* Update src/charm.py

Co-authored-by: Niels Robin-Aubertin <nrobinaubertin@users.noreply.github.com>

---------

Co-authored-by: Niels Robin-Aubertin <nrobinaubertin@users.noreply.github.com>
---
 src/charm.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/charm.py b/src/charm.py
index 1922d9aa..5033b9e7 100755
--- a/src/charm.py
+++ b/src/charm.py
@@ -439,7 +439,8 @@ def _create_layer_config(self) -> ops.pebble.LayerDict:
                 SERVICE_NAME: {
                     "override": "replace",
                     "summary": "Discourse web application",
-                    "command": f"sh -c '{SCRIPT_PATH}/app_launch.sh'",
+                    "command": f"{SCRIPT_PATH}/app_launch.sh",
+                    "user": "_daemon_",
                     "startup": "enabled",
                     "environment": self._create_discourse_environment_settings(),
                 }