SoftEtherVPN/systemd/softether-vpnserver.service

[Unit]
Description=SoftEther VPN Server
After=network.target auditd.service
ConditionPathExists=!@DIR@/softether/vpnserver/do_not_run

[Service]
Type=exec
TasksMax=infinity
ExecStart=@DIR@/softether/vpnserver/vpnserver execsvc
Restart=on-failure

# Hardening
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full
ReadOnlyDirectories=/
ReadWriteDirectories=-@DIR@/softether/vpnserver
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID

[Install]
WantedBy=multi-user.target
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module. 2015-06-05 05:34:02 +03:00			`[Unit]`
			`Description=SoftEther VPN Server`
			`After=network.target auditd.service`
Fix systemd unit file generation 2020-06-30 08:22:37 +03:00			`ConditionPathExists=!@DIR@/softether/vpnserver/do_not_run`
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module. 2015-06-05 05:34:02 +03:00
			`[Service]`
Correct and simplify systemd service files Remove unnecessary wrappers and change to start services directly. Also remove misused "EnvironmentFile" and unrecommended "KillMode=process". 2024-09-17 02:03:19 +03:00			`Type=exec`
Fix invalid systemd TasksMax 2022-05-11 13:23:48 +03:00			`TasksMax=infinity`
Correct and simplify systemd service files Remove unnecessary wrappers and change to start services directly. Also remove misused "EnvironmentFile" and unrecommended "KillMode=process". 2024-09-17 02:03:19 +03:00			`ExecStart=@DIR@/softether/vpnserver/vpnserver execsvc`
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module. 2015-06-05 05:34:02 +03:00			`Restart=on-failure`

Added hardening to confine its system capability to what SoftEther requires 2015-06-22 20:56:28 +03:00			`# Hardening`
			`PrivateTmp=yes`
			`ProtectHome=yes`
			`ProtectSystem=full`
Revert "RPM package and systemd service file fixes (for CentOS 8)" 2021-08-16 14:06:34 +03:00			`ReadOnlyDirectories=/`
			`ReadWriteDirectories=-@DIR@/softether/vpnserver`
systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG 2019-07-08 19:05:35 +03:00			`CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID`
Added hardening to confine its system capability to what SoftEther requires 2015-06-22 20:56:28 +03:00
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module. 2015-06-05 05:34:02 +03:00			`[Install]`
			`WantedBy=multi-user.target`