mirror of
https://github.com/SoftEtherVPN/SoftEtherVPN.git
synced 2024-11-26 19:39:53 +03:00
Systemd service configuration files for SoftEther
This commit is contained in:
parent
3c8abd60ed
commit
525348b6d1
23
systemd/softether-vpnbridge.service
Normal file
23
systemd/softether-vpnbridge.service
Normal file
@ -0,0 +1,23 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=SoftEther VPN Bridge
|
||||||
|
After=network.target auditd.service
|
||||||
|
ConditionPathExists=!/opt/vpnbridge/do_not_run
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=forking
|
||||||
|
ExecStart=/opt/vpnbridge/vpnbridge start
|
||||||
|
ExecStop=/opt/vpnbridge/vpnbridge stop
|
||||||
|
KillMode=process
|
||||||
|
Restart=on-failure
|
||||||
|
|
||||||
|
# Hardening
|
||||||
|
PrivateTmp=yes
|
||||||
|
ProtectHome=yes
|
||||||
|
ProtectSystem=full
|
||||||
|
ReadOnlyDirectories=/
|
||||||
|
ReadWriteDirectories=-/opt/vpnbridge
|
||||||
|
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
25
systemd/softether-vpnclient.service
Normal file
25
systemd/softether-vpnclient.service
Normal file
@ -0,0 +1,25 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=SoftEther VPN Client
|
||||||
|
After=network.target auditd.service
|
||||||
|
ConditionPathExists=!/opt/vpnclient/do_not_run
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=forking
|
||||||
|
EnvironmentFile=-/opt/vpnclient
|
||||||
|
ExecStart=/opt/vpnclient/vpnclient start
|
||||||
|
ExecStop=/opt/vpnclient/vpnclient stop
|
||||||
|
KillMode=process
|
||||||
|
Restart=on-failure
|
||||||
|
|
||||||
|
# Hardening
|
||||||
|
PrivateTmp=yes
|
||||||
|
ProtectHome=yes
|
||||||
|
ProtectSystem=full
|
||||||
|
ReadOnlyDirectories=/
|
||||||
|
ReadWriteDirectories=-/opt/vpnclient
|
||||||
|
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
||||||
|
|
25
systemd/softether-vpnserver.service
Normal file
25
systemd/softether-vpnserver.service
Normal file
@ -0,0 +1,25 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=SoftEther VPN Server
|
||||||
|
After=network.target auditd.service
|
||||||
|
ConditionPathExists=!/opt/vpnserver/do_not_run
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=forking
|
||||||
|
EnvironmentFile=-/opt/vpnserver
|
||||||
|
ExecStart=/opt/vpnserver/vpnserver start
|
||||||
|
ExecStop=/opt/vpnserver/vpnserver stop
|
||||||
|
KillMode=process
|
||||||
|
Restart=on-failure
|
||||||
|
|
||||||
|
# Hardening
|
||||||
|
PrivateTmp=yes
|
||||||
|
ProtectHome=yes
|
||||||
|
ProtectSystem=full
|
||||||
|
ReadOnlyDirectories=/
|
||||||
|
ReadWriteDirectories=-/opt/vpnserver
|
||||||
|
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user