Discuss Write.as and WriteFreely development – our projects, libraries, documentation, and internationalization.
Hi friends,
Wanted to share some experience. I had to rebuild WriteFreely recently to implement a missing feature, and discovered that the minimum Golang version requirement is not true. Won’t build with 1.19, but with only minor changes it will. The importance of Golang 1.19 is that it’s the last available on Debian 11. Necessary changes are to downgrade the packages golang.org/x/crypto to v0.23.0 and golang.org/x/net to v0.25.0.
The missing feature I mentioned was no setting for HTTPS port to listen on. There is an option for HTTP, however it’s more than likely that port 443 will already be taken by Apache. So I had to add this parameter myself. Took me only 5 hours to learn how to do it, being absolute zero in Golang (and struggling with versioning issues).
And third, the systemd unit file you offer in the docs is absolutely insecure. Needs adding user/group at least and enabling system protection settings. Leveraging RootDirectory= chroot would be ideal.
Cheers.