diff --git a/templates/hitch.service.j2 b/templates/hitch.service.j2 new file mode 100644 index 0000000..82db5d1 --- /dev/null +++ b/templates/hitch.service.j2 @@ -0,0 +1,3 @@ +[Service] +ExecStart= +ExecStart=/usr/sbin/hitch --user {{ hitch.user }} --group {{ hitch.group }} --config /etc/hitch/hitch.conf -L 2 --backend="{{ hitch.backend.sock }}" --frontend="[*]:{{ hitch.frontend.port }}" diff --git a/templates/murmur.service.j2 b/templates/murmur.service.j2 deleted file mode 100644 index d80ca28..0000000 --- a/templates/murmur.service.j2 +++ /dev/null @@ -1,19 +0,0 @@ -[Service] -ExecStart= -ExecStart=/usr/sbin/murmurd -fg -ini {{ global.murmur.configpath }} -ProtectSystem=strict -PrivateUsers=true -NoNewPrivileges=yes -TemporaryFileSystem=/:ro -BindReadOnlyPaths={{ global.murmur.configpath }} /usr /lib /lib64 -ProtectControlGroups=yes -ProtectKernelModules=yes -ProtectKernelTunables=yes -RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK -RestrictNamespaces=yes -RestrictRealtime=yes -RestrictSUIDSGID=yes -MemoryDenyWriteExecute=yes -LockPersonality=yes -PrivateTmp=yes -PrivateDevices=yes diff --git a/templates/varnish.service.j2 b/templates/varnish.service.j2 new file mode 100644 index 0000000..4587264 --- /dev/null +++ b/templates/varnish.service.j2 @@ -0,0 +1,3 @@ +[Service] +ExecStart= +ExecStart=/usr/sbin/varnishd -F -a {{ varnish.frontend.sock }},user={{ varnish.frontend.user }},group={{ varnish.frontend.group }},mode={{ varnish.frontend.mode }} -j unix,user={{ varnish.jail.user }} -f /etc/varnish/default.vcl