From c4d3cd7d7b32ed133e25e3740c8e7a3493592eec Mon Sep 17 00:00:00 2001 From: Emmanuel Gomez Date: Tue, 12 Apr 2011 15:36:36 -0700 Subject: Document "user" directive in example unicorn conf --- examples/unicorn.conf.rb | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/examples/unicorn.conf.rb b/examples/unicorn.conf.rb index 28a9e65..61f0b4b 100644 --- a/examples/unicorn.conf.rb +++ b/examples/unicorn.conf.rb @@ -12,6 +12,13 @@ # more will usually help for _short_ waits on databases/caches. worker_processes 4 +# Since Unicorn is never exposed to outside clients, it does not need to +# run on the standard HTTP port (80), there is no reason to start Unicorn +# as root unless it's from system init scripts. +# If running the master process as root and the workers as an unprivileged +# user, do this to switch euid/egid in the workers (also chowns logs): +# user "unprivileged_user", "unprivileged_group" + # Help ensure your application will always spawn in the symlinked # "current" directory that Capistrano sets up. working_directory "/path/to/app/current" # available in 0.94.0+ -- cgit v1.2.3-24-ge0c7