ferron.service

[Unit]
Description=Ferron web server
After=network.target

[Service]
Type=simple
User=ferron
ExecStart=/usr/local/bin/ferron -c /etc/ferron.yaml
ExecReload=kill -HUP $MAINPID
Restart=on-failure
AmbientCapabilities=CAP_NET_BIND_SERVICE

[Install]
WantedBy=multi-user.target

Run Ferron by user/group ferron/ferron

useradd -d /nonexistent -s /usr/sbin/nologin ferron
chown -hR ferron:ferron /var/log/ferron
chown -hR ferron:ferron /var/www/ferron
find /var/log/ferron -type d -exec chmod 755 {} \;
find /var/log/ferron -type f -exec chmod 644 {} \;
find /var/www/ferron -type d -exec chmod 755 {} \;
find /var/www/ferron -type f -exec chmod 644 {} \;