Commit 7dd30754 authored by Noah Hilverling's avatar Noah Hilverling

Remove service file

parent 7d95e7d7
Pipeline #7903 passed with stages
in 2 minutes and 52 seconds
icinga-redis (5.0.7-3) icinga; urgency=medium
* Remove service file (this will be provided by service related packages like icingadb-redis)
-- Noah Hilverling <noah.hilverling@icinga.com> Mon, 16 Dec 2019 13:54:04 +0000
icinga-redis (5.0.7-2) icinga; urgency=medium
* Use static service file
......
[Unit]
Description=Advanced key-value store for Icinga
After=network.target
Documentation=http://redis.io/documentation, man:icinga-redis(1)
[Service]
Type=notify
ExecStart=/usr/bin/icinga-redis-server /etc/icinga-redis/redis.conf --supervised systemd
TimeoutStopSec=0
Restart=always
User=icinga-redis
Group=icinga-redis
RuntimeDirectory=icinga-redis
RuntimeDirectoryMode=2755
UMask=007
PrivateTmp=yes
LimitNOFILE=65535
PrivateDevices=yes
ProtectHome=yes
ReadOnlyDirectories=/
ReadWriteDirectories=-/var/lib/icinga-redis
ReadWriteDirectories=-/var/log/icinga-redis
ReadWriteDirectories=-/var/run/icinga-redis
NoNewPrivileges=true
CapabilityBoundingSet=CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE
MemoryDenyWriteExecute=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectControlGroups=true
RestrictRealtime=true
RestrictNamespaces=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
# icinga-redis can write to its own config file when in cluster mode so we
# permit writing there by default. If you are not using this feature, it is
# recommended that you replace the following lines with "ProtectSystem=full".
ProtectSystem=true
ReadWriteDirectories=-/etc/icinga-redis
[Install]
WantedBy=multi-user.target
\ No newline at end of file
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment