about summary refs log tree commit homepage
diff options
authorEmmanuel Gomez <emmanuel.gomez@gmail.com>2011-04-12 15:36:36 -0700
committerEric Wong <normalperson@yhbt.net>2011-04-12 22:49:01 +0000
commitc4d3cd7d7b32ed133e25e3740c8e7a3493592eec (patch)
parent6647dcb3afa4c0b16c5fef5bfdf88292e6adf6ca (diff)
1 files changed, 7 insertions, 0 deletions
diff --git a/examples/unicorn.conf.rb b/examples/unicorn.conf.rb
index 28a9e65..61f0b4b 100644
--- a/examples/unicorn.conf.rb
+++ b/examples/unicorn.conf.rb
@@ -12,6 +12,13 @@
 # more will usually help for _short_ waits on databases/caches.
 worker_processes 4
+# Since Unicorn is never exposed to outside clients, it does not need to
+# run on the standard HTTP port (80), there is no reason to start Unicorn
+# as root unless it's from system init scripts.
+# If running the master process as root and the workers as an unprivileged
+# user, do this to switch euid/egid in the workers (also chowns logs):
+# user "unprivileged_user", "unprivileged_group"
 # Help ensure your application will always spawn in the symlinked
 # "current" directory that Capistrano sets up.
 working_directory "/path/to/app/current" # available in 0.94.0+