Managing drust.service

drust.service is a core background daemon that runs on dPanel-managed servers. It acts as a privileged localhost API, handling high-privilege system tasks that require root-level access while exposing a clean interface to unprivileged dPanel components.

Security Model

The daemon listens exclusively on the local loopback interface and enforces strict access control:

• Localhost Only: External network interfaces cannot reach the API.
• Bearer Token Authentication: Every HTTP request must supply a valid, dynamically generated bearer token.
• Root Delegation: Tasks executed through drust run with elevated privileges, isolating core system modifications from the web application layer.

Checking Service Status

To verify that drust.service is running correctly on your server, use systemd:

systemctl status drust.service

If the service encounters issues or fails to start, inspect the journal logs for debugging details:

journalctl -u drust.service -e

Configuration and Tokens

Configuration files and authentication keys for drust.service are automatically generated during the initial dPanel installation.

• Token file location: /etc/dpanel/drust.token
• API socket/port: Local TCP loopback (default port configured in /etc/dpanel/config.json)

Never expose the contents of /etc/dpanel/drust.token to untrusted users or applications on the system.