mirror of
https://github.com/OpenVPN/openvpn.git
synced 2026-06-11 01:40:05 -04:00
7660bba111
We start with systemd Type=notify, so refuse to daemonize. This does not affect starting openvpn from script or command line. v2: Update commit message about script and command line. Signed-off-by: Christian Hesse <mail@eworm.de> Tested-By: Richard Bonhomme <fragmentux@gmail.com> Acked-by: David Sommerseth <davids@openvpn.net> Message-Id: <20161201213104.5667-2-list@eworm.de> URL: http://www.mail-archive.com/search?l=mid&q=20161201213104.5667-2-list@eworm.de Signed-off-by: David Sommerseth <davids@openvpn.net>
22 lines
780 B
Desktop File
22 lines
780 B
Desktop File
[Unit]
|
|
Description=OpenVPN service for %I
|
|
After=syslog.target network-online.target
|
|
Wants=network-online.target
|
|
Documentation=man:openvpn(8)
|
|
Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
|
|
Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO
|
|
|
|
[Service]
|
|
Type=notify
|
|
PrivateTmp=true
|
|
RuntimeDirectory=openvpn-server
|
|
RuntimeDirectoryMode=0710
|
|
WorkingDirectory=/etc/openvpn/server
|
|
ExecStart=/usr/sbin/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --config %i.conf
|
|
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE
|
|
LimitNPROC=10
|
|
DeviceAllow=/dev/null rw
|
|
DeviceAllow=/dev/net/tun rw
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|