💾 Archived View for gerikson.com › gemlog › tek › Securing-MB.gmi captured on 2022-03-01 at 15:08:12. Gemini links have been rewritten to link to archived content
-=-=-=-=-=-=-
Via ~ew, I read perplexing.space on securing gemini servers running under systemd. They use Molly Brown, just like I do.
~ew: Re: Securing Gemini Servers
perplexing.space: Securing Gemini Servers
I followed the instructions about securing the systemd unit file, but ran into a snag. The amended systemd directive
ProtectHome=yes
did not work for me. I don’t know if it was because the home setup for my gemini user is different, or not.
Btw I found this by basically commenting out all changes as suggested by perplexing, then uncommenting them one by one and running
sudo systemctl daemon-reload && \ sudo systemctl restart molly-brown.service && \ sudo systemctl status molly-brown.service
after each one.
Hopefully this helps.
I might try to chroot M-B next.
────────────────────────────────────────────
→ more posts in the ‹tek› category
About this category: “technical stuff”
Copyright © 2018 - 2022 Gustaf Erikson
[This Page Viewed Best In Any Gemini Client]