Skip to content
Snippets Groups Projects
Select Git revision
  • 2035b9eed61633ad388aa6eb249221390a1ee1cc
  • master default protected
  • lintian-fixes
3 results

format

Blame
  • Forked from ai3 / thirdparty / rsyslog-exporter
    Source project has a limited visibility.
    acmeserver.service 470 B
    [Unit]
    Description=ACMEserver
    After=network.target
    
    [Service]
    User=acmeserver
    Group=acmeserver
    EnvironmentFile=-/etc/default/acmeserver
    ExecStart=/usr/bin/acmeserver --addr $ADDR
    ExecReload=/bin/kill -HUP $MAINPID
    Restart=always
    
    # Hardening
    NoNewPrivileges=yes
    PrivateTmp=yes
    PrivateDevices=yes
    ProtectHome=yes
    ProtectSystem=full
    ReadOnlyDirectories=/
    ReadWriteDirectories=/var/lib/acme
    CapabilityBoundingSet=CAP_NET_BIND_SERVICE
    
    [Install]
    WantedBy=multi-user.target