I'm doing this over ssh.
I want to create a user that:
can't be accessed via ssh
can be impersonated with
doesn't have a password (is this a good practice?)
can run web apps (specifically with pm2 (nodejs))
This is how we do it at work -- I access a server via ssh (pem key) and then su to the
nodejs user and run the app. I've read a few answers here but they are usually in the form of "I created a user but it doesn't work, what's wrong"
I created a user with
adduser nodejs --system --group but it has a password that I don't know. Perhaps I just need to add something to that command.
OS is Mint/Ubuntu.