mirror/tlstunnel
1
1
Fork 0
mirror of https://git.sr.ht/~emersion/tlstunnel synced 2024-11-19 15:53:50 +01:00
Code

contrib/systemd: add template files

Browse Source
This commit is contained in:
Simon Ser 2021-07-24 15:40:24 +02:00
parent abe91778bd
commit df92b86604
3 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
contrib/systemd/tlstunnel.service Normal file
View File

@ -0,0 +1,29 @@
[Unit]
Description=tlstunnel reverse proxy
Documentation=https://sr.ht/~emersion/tlstunnel
After=network.target
[Service]
User=tlstunnel
ExecStart=/usr/bin/tlstunnel
ExecReload=kill -HUP $MAINPID
TimeoutStopSec=5s
LimitNOFILE=1048576
LimitNPROC=512
# Hardening options
PrivateTmp=true
PrivateDevices=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths=/var/lib/tlstunnel
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
NoNewPrivileges=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
LockPersonality=true
[Install]
WantedBy=multi-user.target

1
contrib/systemd/tlstunnel.sysusers Normal file
View File

@ -0,0 +1 @@
u tlstunnel - "tlstunnel user" /var/lib/tlstunnel

1
contrib/systemd/tlstunnel.tmpfiles Normal file
View File

@ -0,0 +1 @@
d /var/lib/tlstunnel 0750 tlstunnel tlstunnel -