@astier, then a system user should be created and its rights restricted to a minimum.
The command systemd-analyze security whoogle.service
can be used to get a feel for how well it's going.
Git Clone URL: | https://aur.archlinux.org/whoogle.git (read-only, click to copy) |
---|---|
Package Base: | whoogle |
Description: | A self-hosted, ad-free, privacy-respecting metasearch engine |
Upstream URL: | https://github.com/benbusby/whoogle-search |
Keywords: | engine search whoogle |
Licenses: | MIT |
Conflicts: | whoogle-git |
Submitter: | dr460nf1r3 |
Maintainer: | dr460nf1r3 (chaotic-aur) |
Last Packager: | dr460nf1r3 |
Votes: | 6 |
Popularity: | 0.93 |
First Submitted: | 2021-04-08 09:52 (UTC) |
Last Updated: | 2025-01-25 19:37 (UTC) |
« First ‹ Previous 1 2 3 4
@astier, then a system user should be created and its rights restricted to a minimum.
The command systemd-analyze security whoogle.service
can be used to get a feel for how well it's going.
@kseistrup my knowledge about systemd is not that great but I think DynamicUser=true
wouldn't work right now without making changes to the code because of
https://github.com/benbusby/whoogle-search/pull/461
But running as root is certainly a bad idea.
Please do not run as root. Create a system user or set DynamicUser=true
in the service file. Also, it is bad pratice to run and enable the service automatically: the user might not want to run this at startup, and perhaps they want to customise things first (such as assigning a different port or host) before running the service the first time.
Should be fixed now, thanks :)
installed with paru, got two folders in /opt, whoogle-search(empty) and whoogle-search-0.5.0(actual app). systemd service points to the empty folder without content so had to manually edit it.
Pinned Comments
dr460nf1r3 commented on 2021-12-05 12:10 (UTC) (edited on 2022-03-05 09:17 (UTC) by dr460nf1r3)
Installs with official instructions to /opt. Read here for more information and options for the systemd service. ( -> e) manual) The search engine is accessible at localhost:5000, set it as default engine using your browsers option. Binary builds are available at Chaotic-AUR!