RedXen
/
ansible-systemd
Archived
1
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

Update some vars and add murmur service

This commit is contained in:
Alex 2020-05-21 20:18:37 +02:00
parent 95fbf873af
commit 105f71efcd
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
3 changed files with 22 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
templates/influxdb.service.j2
View File

@ -8,6 +8,7 @@ RestartSec=10
# TODO: Add mounts
TemporaryFileSystem=/:ro
BindReadOnlyPaths=/etc/influxdb /usr /lib /lib64
BindPaths={{ influxdb.storage }}
SecureBits=noroot
ProtectSystem=strict

19
templates/murmur.service.j2 Normal file
View File

@ -0,0 +1,19 @@
[Service]
ExecStart=
ExecStart=/usr/sbin/murmurd -fg -ini {{ global.murmur.configpath }}
ProtectSystem=strict
PrivateUsers=true
NoNewPrivileges=yes
TemporaryFileSystem=/:ro
BindReadOnlyPaths={{ global.murmur.configpath }} /usr /lib /lib64
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
MemoryDenyWriteExecute=yes
LockPersonality=yes
PrivateTmp=yes
PrivateDevices=yes

4
templates/transmission-daemon.service.j2
View File

@ -12,10 +12,10 @@ ProtectSystem=strict
PrivateUsers=true
NoNewPrivileges=yes
ReadWritePaths={{ transmission.root_dir }}
ReadWritePaths={{ global.seedbox.transmission.root_dir }}
BindReadOnlyPaths=/usr /lib /lib64
TemporaryFileSystem=/:ro
Environment=TRANSMISSION_HOME={{ transmission.root_dir }}/.config
Environment=TRANSMISSION_HOME={{ global.seedbox.transmission.root_dir }}/.config
ProtectControlGroups=yes
ProtectKernelModules=yes