edgebox-iot / ua-netinst-config Goto Github PK

For security, we should have the daemon run as the user system, so that we can control exactly what privileges and file permissions are accessed.

Then we need to ensure that logging is available. While ‘journalctl’ does provide the logs, what we really want is to have the logs available in the standard “/var/log/” location. So we will tell systemd to send to syslog, and then have syslog write our files out to disk.

Finally, the service should be part of the boot process, so that it automatically starts after reboot.

This is paramount for a fully unattended installation and setup while the repos are private.