boxswapper/stoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

removed stoat service user

Browse Source
This commit is contained in:
boxswapper
2026-09-13 14:00:45 -06:00
parent f70e88f6d5
commit 0ee978142a
8 changed files with 55 additions and 79 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
group_vars/all/vars.yml
View File

@@ -33,20 +33,13 @@ stoat_reverse_proxy: false
stoat_video: true
# ------------------------------------------------------------
# Podman (rootless)
# Podman (runs as root)
# ------------------------------------------------------------
# Unprivileged system user that runs the rootless podman stack
stoat_service_user: chatmanone
podman_packages:
- podman
- podman-compose # compose file runner (supports service_healthy conditions)
- podman-docker # `docker` CLI compatibility, backed by podman
# Rootless containers cannot bind ports < 1024 by default.
# Caddy needs 80/443, so lower the unprivileged port floor.
podman_unprivileged_port_start: 80
# ------------------------------------------------------------
# Hardening - Fail2Ban
# ------------------------------------------------------------