From 9b4b0013ab53549d1a4286ab37a6da42cdd73d15 Mon Sep 17 00:00:00 2001
From: vhsdream <punk.sand7393@fastmail.com>
Date: Fri, 12 Dec 2025 13:19:20 -0500
Subject: [PATCH] create lowpriv user

---
 ct/nextexplorer.sh              | 1 +
 install/nextexplorer-install.sh | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/ct/nextexplorer.sh b/ct/nextexplorer.sh
index 7085221a2..f673a7cfc 100644
--- a/ct/nextexplorer.sh
+++ b/ct/nextexplorer.sh
@@ -51,6 +51,7 @@ function update_script() {
     cd /opt/nextExplorer/
     mv backend/{node_modules,src,package.json} "$APP_DIR"
     mv frontend/dist/ "$APP_DIR"/src/public
+    chown -R explorer:explorer "$APP_DIR" /etc/nextExplorer
     msg_ok "Updated nextExplorer"
 
     msg_info "Starting nextExplorer"
diff --git a/install/nextexplorer-install.sh b/install/nextexplorer-install.sh
index ae34ad1b5..a1f15a7d7 100644
--- a/install/nextexplorer-install.sh
+++ b/install/nextexplorer-install.sh
@@ -110,6 +110,8 @@ SHARES_ENABLED=true
 # SHARES_ALLOW_ANONYMOUS=true
 EOF
 chmod 600 /etc/nextExplorer/.env
+$STD useradd -U -s /bin/bash -m -d /home/explorer explorer
+chown -R explorer:explorer "$APP_DIR" /etc/nextExplorer
 msg_ok "Configured nextExplorer"
 
 msg_info "Creating nextExplorer Service"