SoftEtherVPN/systemd/softether-vpnbridge.service

[Unit]
Description=SoftEther VPN Bridge
After=network.target auditd.service
ConditionPathExists=!@DIR@/softether/vpnbridge/do_not_run

[Service]
Type=exec
ExecStart=@DIR@/softether/vpnbridge/vpnbridge execsvc
Restart=on-failure

# Hardening
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full
ReadOnlyDirectories=/
ReadWriteDirectories=-@DIR@/softether/vpnbridge
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID

[Install]
WantedBy=multi-user.target
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module. 2015-06-05 05:34:02 +03:00			`[Unit]`
			`Description=SoftEther VPN Bridge`
			`After=network.target auditd.service`
Fix systemd unit file generation 2020-06-30 08:22:37 +03:00			`ConditionPathExists=!@DIR@/softether/vpnbridge/do_not_run`
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module. 2015-06-05 05:34:02 +03:00
			`[Service]`
Correct and simplify systemd service files Remove unnecessary wrappers and change to start services directly. Also remove misused "EnvironmentFile" and unrecommended "KillMode=process". 2024-09-17 02:03:19 +03:00			`Type=exec`
			`ExecStart=@DIR@/softether/vpnbridge/vpnbridge execsvc`
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module. 2015-06-05 05:34:02 +03:00			`Restart=on-failure`

Added hardening to confine its system capability to what SoftEther requires 2015-06-22 20:56:28 +03:00			`# Hardening`
			`PrivateTmp=yes`
			`ProtectHome=yes`
			`ProtectSystem=full`
			`ReadOnlyDirectories=/`
Fix systemd unit file generation 2020-06-30 08:22:37 +03:00			`ReadWriteDirectories=-@DIR@/softether/vpnbridge`
systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG 2019-07-08 19:05:35 +03:00			`CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID`
Added hardening to confine its system capability to what SoftEther requires 2015-06-22 20:56:28 +03:00
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module. 2015-06-05 05:34:02 +03:00			`[Install]`
			`WantedBy=multi-user.target`