You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
[Unit]Description=ACME client daemonAfter=network.target
[Service]User=acmedGroup=acmed
# Working directory (acmed home path)WorkingDirectory=/var/lib/acmedRuntimeDirectory=acmed
# daemon handling: start, stop, timeouts#ExecStart=/usr/bin/acmed --foreground --pid-file /run/acmed/acmed.pid --log-level trace --log-stderrExecStart=/usr/bin/acmed --foreground --pid-file /run/acmed/acmed.pid --log-level infoTimeoutStartSec=3TimeoutStopSec=5Restart=on-failureKillSignal=SIGINT
# Sandboxing: reduce privileges on filesystem and kernel-space# restrict write access to acmed's directories with variable dataNoNewPrivileges=yesPrivateDevices=yesPrivateTmp=yesPrivateUsers=yesProtectClock=yesProtectHostname=yesProtectKernelTunables=yesProtectKernelLogs=yesProtectSystem=strictReadWritePaths=/etc/acmed /var/lib/acmedRestrictRealtime=yesRestrictSUIDSGID=yesSystemCallFilter=@system-service
[Install]WantedBy=multi-user.target
|
