Add a systemd service

[lotigara]

I want to setup YaCy on my Debian server, however there is nothing about systemd service. So, I took this systemd service and rewrote it, there is a result:

# yacy.service
[Unit]
Description=YaCy is free software for your own search engine.
After=network.target

[Service]
User=yacy
Group=www-data
WorkingDirectory=/home/yacy/yacy
ExecStart=/home/yacy/yacy/startYACY.sh
Restart=always
ExecReload=/home/yacy/yacy/restartYACY.sh
KillMode=mixed
TimeoutStopSec=1

[Install]
WantedBy=multi-user.target

[okybaca]

another systemd solution offered here

[lotigara]

another systemd solution offered here

Thanks! But it for Fedora, so I'm writing similar instruction for Debian. By the way, why don’t you add instructions for installing YaCy as a service?

[lotigara]

There they are:
(# for commands as root user and $ for commands as YaCy user)

# useradd --system yacydm -m -d /home/yacy
# useradd --system yacy -m -d /home/yacy
# su -l yacy

$ wget https://download.yacy.net/yacy_v1.930_202404051704_de941c6fe.tar.gz
$ tar -xf yacy_v1.930_202404051704_de941c6fe.tar.gz -C ..
$ exit

# chown -R yacydm:yacydm /home/yacy/
# chown -R yacy:yacy /home/yacy/DATA/

# cat > yacy.service << EOF
[Unit]
Description=YaCy Search Server
After=network.target

[Service]
Type=forking
User=yacy
ExecStart=/home/yacy/startYACY.sh
ExecStop=/home/yacy/stopYACY.sh
ExecRestart=/home/yacy/restartYACY.sh

[Install]
WantedBy=multi-user.target
EOF

# cp yacy.service /etc/systemd/system/
# systemctl enable --now yacy.service

# cat >> yacy-nginx << EOF
server {
        listen 80;
        server_name search.example.com;
        access_log /var/log/nginx/search-access.log;
        error_log /var/log/nginx/search-error.log;

        location / {
                proxy_pass http://127.0.0.1:8090;
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Real-IP $remote_addr;
        }
}
EOF

# cp yacy-nginx /etc/nginx/sites-available/yacy
# ln -s /etc/nginx/sites-{available,enabled}/yacy
# nginx -t
# nginx -s reload
# certbot --nginx -d search.example.com

[okybaca]

By the way, why don’t you add instructions for installing YaCy as a service?

https://yacy.net/docs/ is generated out of https://github.com/yacy/yacy_net_homepage , a lot of docs is outdated, so if you have an addition or fix, feel free to modify the documentation and do a PR. I personally don't use systemd, so your guide is valuable!

[okybaca]

just one remark: out of security reasons, i'm used to have two yacy accounts: `yacy` and `yacyadm`, second one with write permissions for all the files, first one for `DATA` only. potential exploit permissions are limited to `DATA` folder only and cannot modify the rest of yacy.

[lotigara]

just one remark: out of security reasons, i'm used to have two yacy accounts: yacy and yacyadm, second one with write permissions for all the files, first one for DATA only. potential exploit permissions are limited to DATA folder only and cannot modify the rest of yacy.

Thanks! I'll modify this instruction.

[okybaca]

Thanks! I'll modify this instruction.

referenced also here: <https://community.searchlab.eu/t/hardening-yacy-for-public-use/947/4>

[lotigara]

There is my Pull Request: yacy/yacy_net_homepage#35

[Orbiter]

pulled it, thank you!

[lotigara]

You're welcome!

[Orbiter]

This is a documentation issue. Thanks to your work here, this is resolved as documentation update; yacy/yacy_net_homepage#35 is pulled.