AMajor/SoftEtherVPN
1
0
Fork 0
mirror of https://github.com/SoftEtherVPN/SoftEtherVPN.git synced 2024-11-25 10:59:53 +03:00
Code Releases Activity
9fc6f634c5
SoftEtherVPN/systemd/softether-vpnserver.service

26 lines
582 B
SYSTEMD
Raw Normal View History

Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module.
2015-06-05 05:34:02 +03:00
[Unit]
Description=SoftEther VPN Server
After=network.target auditd.service
Fix systemd scripts. Makefile installation directory is /usr. Adjusted systemd scripts to correct directory from /opt to /usr. Allows systemd scripts to work correctly.
2018-01-03 19:05:10 +03:00
ConditionPathExists=!/usr/vpnserver/do_not_run
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module.
2015-06-05 05:34:02 +03:00
[Service]
Type=forking
Fix systemd scripts. Makefile installation directory is /usr. Adjusted systemd scripts to correct directory from /opt to /usr. Allows systemd scripts to work correctly.
2018-01-03 19:05:10 +03:00
EnvironmentFile=-/usr/vpnserver
ExecStart=/usr/vpnserver/vpnserver start
ExecStop=/usr/vpnserver/vpnserver stop
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module.
2015-06-05 05:34:02 +03:00
KillMode=process
Restart=on-failure
Added hardening to confine its system capability to what SoftEther requires
2015-06-22 20:56:28 +03:00
# Hardening
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full
ReadOnlyDirectories=/
Fix systemd scripts. Makefile installation directory is /usr. Adjusted systemd scripts to correct directory from /opt to /usr. Allows systemd scripts to work correctly.
2018-01-03 19:05:10 +03:00
ReadWriteDirectories=-/usr/vpnserver
Granting CAP_SETUID as it seems to be needed
2015-06-22 21:39:12 +03:00
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID
Added hardening to confine its system capability to what SoftEther requires
2015-06-22 20:56:28 +03:00
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module.
2015-06-05 05:34:02 +03:00
[Install]
WantedBy=multi-user.target
Copy Permalink