Re: Run Daphne as non-root on low ports

Daphne does not have uid-changing built in, no - it's too simplistic for that, unfortunately.

It's worth noting that systemd has this ability built in - it will listen on sockets for you and bind the socket to an application as needed. Otherwise, as the other poster noted, you can also use a reverse proxy to terminate SSL, which is what Daphne is built assuming (the SSL support in there is because it comes for free with Twisted, rather than being specifically added).

Andrew

On Thu, May 2, 2019 at 6:32 AM BR <raceybe@gmail.com> wrote:

I'm running a simple Django/Channels website using Daphne. Traffic will be relatively low and will likely only see 1-2 clients at a time. I figured this would be a good use case for Daphne to serve both HTTPS and WebSockets.

Does Daphne have a mechanism for starting as root and dropping down to a non-root user after it is running? Root is required at startup because I want it to bind to port 80 or 443, and it needs to access the SSL certificate.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/1015c96c-1a20-4372-9de3-3ca6d2347d98%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CAFwN1upBPizH8%2BSQdC9-qt-Z2SXgjtMqquKcMx5PJhswq2k8fg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.