added a feature to change uid/gid after startup to bind ports lower than

1024 on Linux

config.template.yaml

@@ -192,3 +192,9 @@ ffmpeg:
   enabled: false
 
 link-domain-blacklist: []
+
+# Drop root if started as root!!
+setuid:
+  enabled: false
+  group: 'users'
+  user: 'user'

lib/config.js

@@ -99,7 +99,12 @@ var defaults = {
     ffmpeg: {
         enabled: false
     },
-    "link-domain-blacklist": []
+    "link-domain-blacklist": [],
+    setuid: {
+        enabled: false,
+        "group": "users",
+        "user": "nobody"
+    },
 };
 
 /**

lib/server.js

@@ -108,6 +108,9 @@ var Server = function () {
 
     // background tasks init ----------------------------------------------
     require("./bgtask")(self);
+
+    // setuid
+    require("./setuid");
 };
 
 Server.prototype.getHTTPIP = function (req) {