milky/asd-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sec: 实施最小权限 — 创建 rust-backend 系统用户运行后端，限制 deploy sudo 仅允许部署/运维命令
Some checks failed
Deploy Backend / deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
milky0217
2026-07-15 11:17:24 +08:00
parent 36d384f8fa
commit 2908d8c86c
4 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
deploy/rust-backend-blue.service
View File

@@ -5,8 +5,8 @@ Wants=network.target
[Service] [Service]
Type=simple Type=simple
User=root User=rust-backend
Group=root Group=rust-backend
WorkingDirectory=/root/rust/rust_backend_blue WorkingDirectory=/root/rust/rust_backend_blue
ExecStart=/root/rust/rust_backend_blue/rust-backend ExecStart=/root/rust/rust_backend_blue/rust-backend
Restart=always Restart=always

4
deploy/rust-backend-development.service
View File

@@ -5,8 +5,8 @@ Wants=network.target
[Service] [Service]
Type=simple Type=simple
User=root User=rust-backend
Group=root Group=rust-backend
WorkingDirectory=/root/rust/rust_backend_dev WorkingDirectory=/root/rust/rust_backend_dev
ExecStart=/root/rust/rust_backend_dev/rust-backend ExecStart=/root/rust/rust_backend_dev/rust-backend
Restart=always Restart=always

4
deploy/rust-backend-green.service
View File

@@ -5,8 +5,8 @@ Wants=network.target
[Service] [Service]
Type=simple Type=simple
User=root User=rust-backend
Group=root Group=rust-backend
WorkingDirectory=/root/rust/rust_backend_green WorkingDirectory=/root/rust/rust_backend_green
ExecStart=/root/rust/rust_backend_green/rust-backend ExecStart=/root/rust/rust_backend_green/rust-backend
Restart=always Restart=always

4
deploy/rust-backend-prod.service
View File

@@ -5,8 +5,8 @@ Wants=network.target
[Service] [Service]
Type=simple Type=simple
User=root User=rust-backend
Group=root Group=rust-backend
WorkingDirectory=/root/rust/rust_backend WorkingDirectory=/root/rust/rust_backend
ExecStart=/root/rust/rust_backend/rust-backend ExecStart=/root/rust/rust_backend/rust-backend
Restart=always Restart=always