From 43c9c50af4d0010a0f2cd665769bb3033f16790c Mon Sep 17 00:00:00 2001 From: Florian Preinstorfer Date: Mon, 19 May 2025 14:30:07 +0200 Subject: [PATCH] Drop syslog.target and systemd-managed /var/run The systemd target "syslog.target" and not required because syslog is socket activated. The directory /var/run is usually a symlink to /run and its created by systemd via the RuntimeDirectory=headscale option. System creates and handles permissions, no need to manually mark it as a read-write path. --- packaging/systemd/headscale.service | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/packaging/systemd/headscale.service b/packaging/systemd/headscale.service index 37d5f5d3..7d20444f 100644 --- a/packaging/systemd/headscale.service +++ b/packaging/systemd/headscale.service @@ -1,5 +1,4 @@ [Unit] -After=syslog.target After=network.target Description=headscale coordination server for Tailscale X-Restart-Triggers=/etc/headscale/config.yaml @@ -14,7 +13,7 @@ Restart=always RestartSec=5 WorkingDirectory=/var/lib/headscale -ReadWritePaths=/var/lib/headscale /var/run +ReadWritePaths=/var/lib/headscale AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN