RedXen
/
ansible-systemd
Archived
1
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

Tweak monitoring and varnish start options

This commit is contained in:
Alex 2020-05-31 11:59:12 +02:00
parent 806a6acd9d
commit 5203629648
Signed by: caskd
GPG Key ID: F92BA85F61F4C173
4 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
templates/grafana-server.service.j2
View File

@ -1,6 +1,6 @@
[Service]
ExecStart=
ExecStart=/usr/sbin/grafana-server --config=/etc/grafana/grafana.ini --pidfile=/run/grafana-server.pid --packaging=deb cfg:default.paths.logs=/var/log/grafana
ExecStart=/usr/sbin/grafana-server --config=/etc/grafana/grafana.ini --pidfile=/run/grafana/grafana-server.pid --packaging=deb cfg:default.paths.logs=/var/log/grafana cfg:default.paths.data=/tmp/data cfg:default.paths.plugins=/tmp/plugins cfg:default.paths.provisioning=/tmp/provision
# TODO: Store or provision a set of plugins, prefferably the latter
ProtectSystem=strict
@ -8,6 +8,8 @@ PrivateUsers=true
NoNewPrivileges=yes
TemporaryFileSystem=/:ro
BindReadOnlyPaths=/etc/grafana /usr /lib /lib64
LogsDirectory=grafana
RuntimeDirectory=grafana
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes

1
templates/influxdb.service.j2
View File

@ -10,7 +10,6 @@ TemporaryFileSystem=/:ro
BindReadOnlyPaths=/etc/influxdb /usr /lib /lib64
BindPaths={{ influxdb.storage }}
SecureBits=noroot
ProtectSystem=strict
PrivateUsers=true
NoNewPrivileges=yes

5
templates/telegraf.service.j2
View File

@ -1,6 +1,9 @@
[Service]
EnvironmentFile=
ExecStart=
ExecStart=/usr/bin/telegraf -config /etc/telegraf/telegraf.conf -config-directory /etc/telegraf/telegraf.d
ProtectSystem=strict
PrivateUsers=true
NoNewPrivileges=yes
TemporaryFileSystem=/:ro
BindReadOnlyPaths=/etc/telegraf /usr /lib /lib64 /proc /sys

2
templates/varnish.service.j2
View File

@ -1,3 +1,3 @@
[Service]
ExecStart=
ExecStart=/usr/sbin/varnishd -F -a {{ varnish.frontend.sock }},user={{ varnish.frontend.user }},group={{ varnish.frontend.group }},mode={{ varnish.frontend.mode }} -j unix,user={{ varnish.jail.user }} -f /etc/varnish/default.vcl
ExecStart=/usr/sbin/varnishd -F -a {{ varnish.frontend.sock }},user={{ varnish.frontend.user }},group={{ varnish.frontend.group }},mode={{ varnish.frontend.mode }} -j unix,user={{ varnish.jail.user }} -f /etc/varnish/default.vcl -s malloc,256m