Make unique dynamic user for each ssh connection and improve doc

2025-07-27 22:00:03 -04:00
parent 90cab573eb
commit 739cca01c4
2 changed files with 5 additions and 1 deletions
--- a/nnss-ssh@.service
+++ b/nnss-ssh@.service
@@ -8,9 +8,13 @@ StopWhenUnneeded=yes
 Type=notify
 NotifyAccess=all
 DynamicUser=yes
+User=nnss-ssh-%i

 LoadCredential=ssh:/etc/nnss/%i

+# Note: App service running in the namespace should have Restart=always,
+# otherwise, both the ssh connection and the app will be stopped as this unit
+# has StopWhenUnneeded set
 # https://enotty.pipebreaker.pl/posts/2024/01/how-systemd-exponential-restart-delay-works/
 Restart=on-failure
 RestartSec=5min