So I am following the Radicale docs.
And the first method is this:
as normal user Recommended only for testing
Okay, I’m not testing, so I move onto the next one:
as system user (or as root) Alternatively, you can install and run as system user or as root (not recommended):
Okay, so this method is not recommended…
And there aren’t anymore.
So what’s the recommended method for non-testing environments???
You make a new normal, non-root user specifically to run Radicale processes. The user should have write access only to Radicale’s directories, nothing else.
Same deal with Apache and the
www-datauser.