Hacker News new | past | comments | ask | show | jobs | submit login

I'm not sure how big the issue is, but I would add the ability to run your Go app as an restricted user.

Using Nginx or another webserver in front of your app means that you won't have to deal with privilege seperation yourself. Just run the Go binary in a chroot as an restricted user and let Nginx deal with the binding on port 80/443.




If all you want is binding to port 80/443, then it's simpler to use iptable port forwarding than Nginx.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: