From 5187c28f9192db77869f14d31c8f844e3859d463 Mon Sep 17 00:00:00 2001
From: Nikolay Amiantov <ab@fmap.me>
Date: Sun, 16 Oct 2016 03:07:53 +0300
Subject: [PATCH] parsoid service: don't run as a superuser

---
 nixos/modules/services/misc/parsoid.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/misc/parsoid.nix b/nixos/modules/services/misc/parsoid.nix
index da090b08f34..ab1b5406877 100644
--- a/nixos/modules/services/misc/parsoid.nix
+++ b/nixos/modules/services/misc/parsoid.nix
@@ -91,6 +91,7 @@ in
       wantedBy = [ "multi-user.target" ];
       after = [ "network.target" ];
       serviceConfig = {
+        User = "nobody";
         ExecStart = "${pkgs.nodePackages.parsoid}/lib/node_modules/parsoid/bin/server.js -c ${confFile} -n ${toString cfg.workers}";
       };
     };