dep
This commit is contained in:
1 parent
5807d11550
commit
f77f692001
1 file changed
+4
-4
@@ -34,9 +34,9 @@ WorkingDirectory=/var/lib/rustproxy
|
|||||||
UMask=0077
|
UMask=0077
|
||||||
Environment=RUST_LOG=rust_proxy=info,warn
|
Environment=RUST_LOG=rust_proxy=info,warn
|
||||||
Environment=MALLOC_ARENA_MAX=2
|
Environment=MALLOC_ARENA_MAX=2
|
||||||
Environment=PATH=/opt/rustproxy-certbot/bin:/usr/local/bin:/usr/bin:/bin
|
Environment=PATH=/usr/local/bin:/usr/bin:/bin
|
||||||
EnvironmentFile=-/etc/rustproxy/environment
|
EnvironmentFile=-/etc/rustproxy/environment
|
||||||
ExecStart=/usr/bin/$BINARY_NAME --data-dir /var/lib/rustproxy --admin-listen 0.0.0.0:9090 serve --proxy-listen 0.0.0.0:80 --tls-listen 0.0.0.0:443 --allow-remote-admin
|
ExecStart=/usr/bin/$BINARY_NAME --data-dir /var/lib/rustproxy --admin-listen 0.0.0.0:9090 --proxy-listen 0.0.0.0:80 --tls-listen 0.0.0.0:443 --allow-remote-admin serve
|
||||||
Restart=on-failure
|
Restart=on-failure
|
||||||
RestartSec=3
|
RestartSec=3
|
||||||
KillSignal=SIGINT
|
KillSignal=SIGINT
|
||||||
@@ -49,7 +49,7 @@ PrivateTmp=true
|
|||||||
PrivateDevices=true
|
PrivateDevices=true
|
||||||
ProtectSystem=strict
|
ProtectSystem=strict
|
||||||
LogsDirectory=rustproxy
|
LogsDirectory=rustproxy
|
||||||
LogsDirectoryMode=0770
|
LogsDirectoryMode=0700
|
||||||
ReadWritePaths=/var/lib/rustproxy /var/log/rustproxy
|
ReadWritePaths=/var/lib/rustproxy /var/log/rustproxy
|
||||||
ProtectHome=true
|
ProtectHome=true
|
||||||
ProtectKernelTunables=true
|
ProtectKernelTunables=true
|
||||||
@@ -139,7 +139,7 @@ fi
|
|||||||
if ! getent passwd "$PACKAGE_NAME" >/dev/null 2>&1; then
|
if ! getent passwd "$PACKAGE_NAME" >/dev/null 2>&1; then
|
||||||
useradd --system --gid "$PACKAGE_NAME" --home-dir "/var/lib/$PACKAGE_NAME" --no-create-home --shell /sbin/nologin "$PACKAGE_NAME"
|
useradd --system --gid "$PACKAGE_NAME" --home-dir "/var/lib/$PACKAGE_NAME" --no-create-home --shell /sbin/nologin "$PACKAGE_NAME"
|
||||||
fi
|
fi
|
||||||
install -d -o "$PACKAGE_NAME" -g "$PACKAGE_NAME" -m 0750 "/var/lib/$PACKAGE_NAME" "/var/log/$PACKAGE_NAME"
|
install -d -o "$PACKAGE_NAME" -g "$PACKAGE_NAME" -m 0700 "/var/lib/$PACKAGE_NAME" "/var/log/$PACKAGE_NAME"
|
||||||
systemd-tmpfiles --create "/usr/lib/tmpfiles.d/${PACKAGE_NAME}.conf" >/dev/null 2>&1 || true
|
systemd-tmpfiles --create "/usr/lib/tmpfiles.d/${PACKAGE_NAME}.conf" >/dev/null 2>&1 || true
|
||||||
systemctl daemon-reload >/dev/null 2>&1 || true
|
systemctl daemon-reload >/dev/null 2>&1 || true
|
||||||
systemctl enable "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true
|
systemctl enable "${PACKAGE_NAME}.service" >/dev/null 2>&1 || true
|
||||||
|
|||||||
Reference in new issue
Block a user