Document setup of accounts for processing workers
kba opened this issue · comments
In practice - at least that is how I have been testing it - you would need to set up a dedicated account for the processing workers in any case, to set up a minimal shell environment (setting $PATH to include the venv for example) and restrict that account as much as possible, since it can be accessed via SSH.
Yes, that should be in practice.
Deploying the ocrd_loggging.conf would be one step of that. Do we already have that part of the deployment process documented already, beyond https://pad.gwdg.de/Ty6IXzhIRa6AvDdC4kTy_g (which implies this setup already done)?
No.
Originally posted by @MehmedGIT in #1161 (comment)