Browse Source

Change ProtectSystem to yes

The strict mode was not adapted since it would prevent ACMEd to write
http-01 challenge files inside the web server's directory.
pull/53/head
Rodolphe Bréard 4 years ago
parent
commit
8aae7d58b0
  1. 2
      contrib/systemd/acmed.service

2
contrib/systemd/acmed.service

@ -28,7 +28,7 @@ ProtectClock=yes
ProtectHostname=yes
ProtectKernelTunables=yes
ProtectKernelLogs=yes
ProtectSystem=strict
ProtectSystem=yes
ReadWritePaths=/etc/acmed /var/lib/acmed
RestrictRealtime=yes
RestrictSUIDSGID=yes

Loading…
Cancel
Save