I learned not to run my nginx as root

I mostly use Android for my daily stuff rather than my laptop. But when I do use my laptop, I’ll rarely touch my phone. 🙃

I was running nginx in Termux on port 80 for some reason. Since SELinux is set to permissive mode, it wasn’t stopping me from doing that. To start a server on that port, I had to be root — so I started nginx as root, which means it was running with root privileges. That’s essentially a real root user on my host, able to access my files and anything else. Running it in Docker would at least be better. Or you could get more fine-grained control via SELinux, AppArmor, or Firejail with custom profiles for tighter security. I found a good article about this > here <. It’s a Medium article.

Happy learning! 😉