16 Commits

Author	SHA1	Message	Date
surtur	5cfb2979cb	compose: pin revisions	2022-09-28 16:37:47 +02:00
surtur	61c2db54d2	compose: add labels for traefik to ignore	2022-09-28 16:36:40 +02:00
surtur	594825aa53	systemd,compose: adjust restart policy	2022-09-28 16:35:26 +02:00
surtur	260ad07626	systemd(SystemCallFilter=~): allow resources group	2022-09-28 16:32:40 +02:00
surtur	0229ed60ec	systemd: add ExecStartPre directive	2022-09-28 16:31:50 +02:00
surtur	0747bb247b	systemd: increase restart timeout to 15s	2022-09-28 16:31:19 +02:00
surtur	1687d49526	systemd: adjust dependency relations	2022-09-28 16:31:01 +02:00
surtur	f461367c73	systemd: stop delegating cgroups	2022-09-28 16:29:50 +02:00
surtur	ea51959b59	systemd: use Environment for DRYness	2022-09-28 16:28:38 +02:00
surtur	ab4e6375e0	set RestrictAddressFamilies to unix,ipv4,ipv6	2022-04-20 16:54:52 +02:00
surtur	c27499e2d3	rm forgotten comment	2022-04-20 16:53:46 +02:00
surtur	2ddfd699c3	restrict all namespaces	2022-04-20 16:52:59 +02:00
surtur	02098c63d4	set ProtectProc,ProcSubset	2022-04-20 16:52:11 +02:00
surtur	9b6bc98086	tighten Capabilities and SystemCallFilter list	2022-04-20 16:51:14 +02:00
surtur	1d34e711f6	run service with "--remove-orphans"	2022-04-20 16:49:23 +02:00
surtur	38e53c1060	create proper folder structer	2022-03-26 02:55:00 +01:00