mirror of
https://github.com/juanfont/headscale.git
synced 2025-05-23 18:41:52 -04:00
Drop syslog.target and systemd-managed /var/run
The systemd target "syslog.target" and not required because syslog is socket activated. The directory /var/run is usually a symlink to /run and its created by systemd via the RuntimeDirectory=headscale option. System creates and handles permissions, no need to manually mark it as a read-write path.
This commit is contained in:
parent
4a941a2cb4
commit
43c9c50af4
@ -1,5 +1,4 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
After=syslog.target
|
|
||||||
After=network.target
|
After=network.target
|
||||||
Description=headscale coordination server for Tailscale
|
Description=headscale coordination server for Tailscale
|
||||||
X-Restart-Triggers=/etc/headscale/config.yaml
|
X-Restart-Triggers=/etc/headscale/config.yaml
|
||||||
@ -14,7 +13,7 @@ Restart=always
|
|||||||
RestartSec=5
|
RestartSec=5
|
||||||
|
|
||||||
WorkingDirectory=/var/lib/headscale
|
WorkingDirectory=/var/lib/headscale
|
||||||
ReadWritePaths=/var/lib/headscale /var/run
|
ReadWritePaths=/var/lib/headscale
|
||||||
|
|
||||||
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
|
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
|
||||||
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
|
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
|
||||||
|
Loading…
x
Reference in New Issue
Block a user