mirror of
https://github.com/nextcloud/all-in-one.git
synced 2026-05-21 10:50:10 +00:00
c6748dc450
The session-deduplicator only touches files under /mnt/docker-aio-config/session/, which is already owned by www-data, so running it as root grants more privilege than it needs. Dropping to www-data reduces the number of root-owned processes in the mastercontainer and follows least-privilege for the supervisord program set.
65 lines
1.6 KiB
Plaintext
65 lines
1.6 KiB
Plaintext
[supervisord]
|
|
nodaemon=true
|
|
logfile=/var/log/supervisord/supervisord.log
|
|
pidfile=/var/run/supervisord/supervisord.pid
|
|
childlogdir=/var/log/supervisord/
|
|
logfile_maxbytes=50MB
|
|
logfile_backups=10
|
|
loglevel=%(ENV_AIO_LOG_LEVEL)s
|
|
user=root
|
|
|
|
[program:php-fpm]
|
|
# Stdout logging is disabled as otherwise the logs are spammed
|
|
stdout_logfile=%(ENV_SUPERVISORD_STDOUT)s
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
command=php-fpm
|
|
user=root
|
|
|
|
[program:caddy-internal]
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
command=/usr/bin/caddy run --config /internal.Caddyfile
|
|
user=www-data
|
|
|
|
[program:caddy-acme]
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
command=/usr/bin/caddy run --config /acme.Caddyfile
|
|
user=www-data
|
|
|
|
[program:cron]
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
command=/cron.sh
|
|
user=root
|
|
|
|
[program:backup-time-file-watcher]
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
command=/backup-time-file-watcher.sh
|
|
user=root
|
|
|
|
[program:session-deduplicator]
|
|
stdout_logfile=/dev/stdout
|
|
stdout_logfile_maxbytes=0
|
|
stderr_logfile=/dev/stderr
|
|
stderr_logfile_maxbytes=0
|
|
command=/session-deduplicator.sh
|
|
user=www-data
|
|
|
|
[program:domain-validator]
|
|
# Logging is disabled as otherwise all attempts will be logged which spams the logs
|
|
stdout_logfile=%(ENV_SUPERVISORD_STDOUT)s
|
|
stderr_logfile=%(ENV_SUPERVISORD_STDOUT)s
|
|
command=php -S 127.0.0.1:9876 /var/www/docker-aio/php/domain-validator.php
|
|
user=www-data
|