Arch Linux User Repository

Yes, I can do that in the next update for sure.

Would it be possible to include the use of "EnvironmentFile" maybe make it something like "EnvironmentFile=/etc/default/duplicati"

Would make it cleaner to change or add environment variables for those who wish to change them. For example I'm having to 'systemctl edit duplicati.service' to add 'Environment=DUPLICATI_HOME=' so I can point to a different larger disk to store duplicati settings and cache.

@android_aur

I created a new group with 'groupadd' as root, you can name yours however you'd like.

I then added the users I wanted to access folders and files to the new group with 'usermod -aG <group> <username>' as root. Here is where you want to make sure your user and the duplicati user created by this package is in the same group.

Lastly I made the folders I wanted accessed by duplicati and my user owned by the new group I created with 'chown' as root.

This Arch Wiki page has a lot of great information about managing the users and groups https://wiki.archlinux.org/title/Users_and_groups

@Raansu

What I did was add the 'duplicati' user to a backup group so it could access the files I wanted to backup. Seems to work great here.

How can I do this?

Ah yes, I forget that this is a thing! Sounds great!

What I did was add the 'duplicati' user to a backup group so it could access the files I wanted to backup. Seems to work great here.

I can't say I've tested it that much, I only use it as my own user. I believe the daemon could only read files that the duplicati user can read, so if you wanted to backup your home directory it wouldn't be that useful. If you wanted to backup system files, you'd probably even want to run it as root.

Anyway, for both running as root and duplicati, you'd probably need to be root to interact with the daemon anyway. Maybe check some past comments? I think other users use it that way as well.

@valandil Not enabling the "duplicati-user.service" file and using the other included "duplicati.service" seems fine here, seems to run under the 'duplicati' user that was created.

Is there any reason why I might want to do it differently? Or any glaring security issues from running it that way I might not be thinking of?

Yeah, that package was mostly designed for desktop users. If the existing duplicati service is fine with you, I'll leave it as is. If you want different behaviour, you could also add a drop-in file for the user service.

I see the issue. "systemctl --user enable duplicati" is triggering "duplicati-user.service" which is not desirable on a headless system like the one I'm trying to run.

Because "duplicati-user.service" has "ExecStart=/usr/bin/mono /opt/duplicati-latest/Duplicati.GUI.TrayIcon.exe --webservice-port=8200" which requires a desktop environment to run and display notifications.

But since the regular "duplicati.service" file is calling for the 'duplicati' user that shouldn't be a problem to enable that instead.