diff --git a/blog/site-to-site-wireguard-part-4-2019-04-16.markdown b/blog/site-to-site-wireguard-part-4-2019-04-16.markdown index c7b1578..5862cc0 100644 --- a/blog/site-to-site-wireguard-part-4-2019-04-16.markdown +++ b/blog/site-to-site-wireguard-part-4-2019-04-16.markdown @@ -47,8 +47,8 @@ These permissions are set as such: | Facet | Read | Write | Directory Listing | | :--------------- | :--- | :---- | :---------------- | -| User (www-data) | Yes | Yes | Yes | -| Group (www-data) | Yes | No | Yes | +| User (root) | Yes | Yes | Yes | +| Group (root) | Yes | No | Yes | | Others | Yes | No | Yes | In order for Caddy to bind to the standard HTTP and HTTPS ports as non-root (this is a workaround for the fact that [Go can't currently drop permissions with suid() cleanly](https://github.com/golang/go/issues/1435)), run the following: