systemd agent service not running as beszel user?

[Lombra]

Hi,

I've just set this up on a couple of Debian servers. The documentation mentions that the agent does not run as root, but that does not seem to be the case? I see that there are a bunch of security related directives in the unit file, so maybe it's fine, but the process does run as root. Just wanted to check whether I've misunderstood anything. If it's meant to run as root, then what is the purpose of the beszel user?

[tfilo]

Hi i just did that on raspberry pi. Create user

sudo useradd -r -s /bin/false beszel
If you like monitor docker too add user to group
sudo usermod -aG docker beszel

Than just add in file /etc/systemd/system/beszel-agent.service into [Service] section:

User=beszel
Group=beszel

And change ProtectHome to yes

Than change ownership of agent binary

sudo chown -R beszel:beszel /your/location/beszel-agent
sudo chmod +x /your/location/beszel-agent

Than restart agent