25 lines
588 B
SYSTEMD
25 lines
588 B
SYSTEMD
|
# This file is shipped as part of the salt-netbox-roleproxy package.
|
||
|
|
# Author: Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
|
||
|
|
|
||
|
|
[Unit]
|
||
|
|
Description=Salt NetBox Role Proxy
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
User=roleproxy
|
||
|
|
EnvironmentFile=/etc/sysconfig/roleproxy
|
||
|
|
ExecStart=/usr/local/bin/roleproxy.py
|
||
|
|
ProtectSystem=strict
|
||
|
|
ProtectHome=yes
|
||
|
|
PrivateDevices=yes
|
||
|
|
PrivateTmp=yes
|
||
|
|
PrivateUsers=yes
|
||
|
|
ProtectKernelTunables=yes
|
||
|
|
ProtectKernelLogs=yes
|
||
|
|
ProtectControlGroups=yes
|
||
|
|
RestrictAddressFamilies=AF_INET6 AF_INET
|
||
|
|
SystemCallArchitectures=native
|
||
|
|
SystemCallFilter=@system-service
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|