sudo setcap 'cap_net_admin,cap_net_raw,cap_sys_nice+ep' /usr/bin/astra Run the service as the astra user. Edit /etc/systemd/system/astra.service :
[Service] User=astra Group=astra CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW CAP_SYS_NICE NoNewPrivileges=yes Do not expose the Astra Admin Panel (TCP 8000) to the internet. Use SSH tunneling: astra cesbo install better
mkdir /dev/shm/astra_logs astra --log-dir /dev/shm/astra_logs --log-level 3 Use logrotate to flush RAM to disk hourly. Never use kill -9 . Use the management API: Never use kill -9
This gives you the absolute latest DVB frontends and demodulators. Now that Astra is installed, the default config file ( /etc/astra/astra.conf ) is a mess of spaghetti rules. Let's do it better. Use Include Directories Instead of one massive file, split your config: Let's do it better
ssh -L 8001:localhost:8000 user@astra-server Now access admin at http://localhost:8001 . Your install is complete, but a better install includes observability. Built-in Health Checks Create a cron job every minute:
/etc/astra/astra.conf /etc/astra/conf.d/adapters/ /etc/astra/conf.d/streams/ /etc/astra/conf.d/filters/ Example master config: