this post was submitted on 02 Oct 2025
17 points (90.5% liked)

Selfhosted

60210 readers
1013 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

So I am following the Radicale docs.

And the first method is this:

as normal user Recommended only for testing

Okay, I'm not testing, so I move onto the next one:

as system user (or as root) Alternatively, you can install and run as system user or as root (not recommended):

Okay, so this method is not recommended...

And there aren't anymore.

So what's the recommended method for non-testing environments?????

you are viewing a single comment's thread
view the rest of the comments
[–] truthfultemporarily@feddit.org 2 points 8 months ago (1 children)

Everything should run under their own user when possible. This software is not using a privileged port (< 1000) so it doesn't need root.

The docs seem a bit lazy if that is not recommended, possibly it will try to access some files it does not have access to.

[–] Flax_vert@feddit.uk 3 points 8 months ago (1 children)

So I make a new user for it, but NOT root?

[–] rtxn@lemmy.world 4 points 8 months ago* (last edited 8 months ago)

You make a new normal, non-root user specifically to run Radicale processes. The user should have write access only to Radicale's directories, nothing else.

Same deal with Apache and the www-data user.