AMajor/SoftEtherVPN
1
0
Fork 0
mirror of https://github.com/SoftEtherVPN/SoftEtherVPN.git synced 2024-12-26 01:59:53 +03:00
Code Releases Activity
d061abae8f
SoftEtherVPN/systemd/softether-vpnserver.service

28 lines
832 B
SYSTEMD
Raw Normal View History

Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module.
2015-06-05 05:34:02 +03:00
[Unit]
Description=SoftEther VPN Server
After=network.target auditd.service
Fix systemd unit file generation
2020-06-30 08:22:37 +03:00
ConditionPathExists=!@DIR@/softether/vpnserver/do_not_run
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module.
2015-06-05 05:34:02 +03:00
[Service]
Type=forking
Increased the task limit of the unit file to be 4096 (max connections per hub) * 4096 (max hubs)
2019-04-19 12:53:39 +03:00
TasksMax=16777216
Fix systemd unit file generation
2020-06-30 08:22:37 +03:00
EnvironmentFile=-@DIR@/softether/vpnserver
ExecStart=@DIR@/softether/vpnserver/vpnserver start
ExecStop=@DIR@/softether/vpnserver/vpnserver stop
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module.
2015-06-05 05:34:02 +03:00
KillMode=process
Restart=on-failure
Added hardening to confine its system capability to what SoftEther requires
2015-06-22 20:56:28 +03:00
# Hardening
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full
Update `softether-vpnserver.service` files: * change `ReadOnlyDirectories` -> `ReadOnlyPaths` and `ReadWriteDirectories` -> `ReadWritePaths` * add `ReadWritePaths` for other necessary directories (this should address #1111)
2021-06-30 18:48:45 +03:00
ReadOnlyPaths=/
ReadWritePaths=-@DIR@/softether/vpnserver
ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/run/softether
ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/var/log/softether
ReadWritePaths=@CPACK_PACKAGING_INSTALL_PREFIX@/var/lib/softether
systemd: replace deprecated CAP_SYS_ADMIN with CAP_SYSLOG
2019-07-08 19:05:35 +03:00
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID
Added hardening to confine its system capability to what SoftEther requires
2015-06-22 20:56:28 +03:00
Systemd configuration files Expects vpnserver/vpnclient/vpnbridge to be in /opt. Having a file do_not_run within these directories inhibits launch of a respective module.
2015-06-05 05:34:02 +03:00
[Install]
WantedBy=multi-user.target
Copy Permalink