Run as a dedicated user instead of root

2026-05-12 11:36:00 -05:00
parent e98c235fc3
commit 4c9436a821
5 changed files with 43 additions and 4 deletions
@@ -4,10 +4,19 @@ After=network.target

 [Service]
 Type=simple
+User=rustdesk
+Group=rustdesk
 WorkingDirectory=/var/lib/rustdesk-server
 ExecStart=/usr/bin/hbbs
-Restart=always
+Restart=on-failure
 RestartSec=10

+# Security Hardening
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectHome=yes
+ReadWritePaths=/var/lib/rustdesk-server
+
 [Install]
 WantedBy=multi-user.target