c10ad0d9eb
Drop privileges to a regular user when running commands defined by this snap. In most cases this is done prior to executing the command. NGINX is an exception in that the command will be run as root, allowing the the master process to bind to ports. The nginx.conf template is configured to then drop privileges for worker processes, which do all work, such as handling network connections, r/w to disk, and communication with servers. Change-Id: If9bf24fc65412b90b8b1890944a469de23888c32
12 lines
256 B
Django/Jinja
12 lines
256 B
Django/Jinja
[DEFAULT]
|
|
# Set state path to writable directory
|
|
state_path = {{ snap_common }}/lib
|
|
|
|
[oslo_concurrency]
|
|
# Oslo Concurrency lock path
|
|
lock_path = {{ snap_common }}/lock
|
|
|
|
[fernet_tokens]
|
|
# Fernet key repository
|
|
key_repository = {{ snap_common }}/fernet-keys
|