Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • Why must your service start as root if you don't use socket activation? Why doesn't your monitoring service ask systemd when the service has stopped? Commented Feb 1, 2019 at 3:33
  • root (or capabilities) because it listens on port 443. How would the remote monitoring system talk to systemd? Commented Feb 1, 2019 at 17:17
  • This is not a good use case for socket activation. You should instead configure your web server to drop privileges, like every other web server does. You could also run it on an unprivileged port with a standard web server in front of it, which is possibly a better idea. Commented Feb 1, 2019 at 17:56