diff options
| author | Arne Schwabe <arne@rfc2549.org> | 2014-10-16 12:40:17 +0200 |
|---|---|---|
| committer | Arne Schwabe <arne@rfc2549.org> | 2014-10-16 12:40:17 +0200 |
| commit | de0fb97e71f0bc63f59ad8a6cfa19dc4914f2514 (patch) | |
| tree | 999f069ee9fa03f1cdafbb41286a17d231732e16 /main/openvpn/distro/systemd | |
| parent | 6a01eb5e6ec9c775e5053c8eb858cf5b6dc2a18d (diff) | |
Update OpenVPN
--HG--
extra : rebase_source : eae76bb97139022b5592b2599b7e3870054bcaa9
Diffstat (limited to 'main/openvpn/distro/systemd')
| -rw-r--r-- | main/openvpn/distro/systemd/openvpn@.service | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/main/openvpn/distro/systemd/openvpn@.service b/main/openvpn/distro/systemd/openvpn@.service new file mode 100644 index 00000000..7cd36c36 --- /dev/null +++ b/main/openvpn/distro/systemd/openvpn@.service @@ -0,0 +1,19 @@ +[Unit] +Description=OpenVPN tunnel for %I +After=syslog.target network.target +Documentation=man:openvpn(8) +Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage +Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO + +[Service] +PrivateTmp=true +Type=forking +PIDFile=/var/run/openvpn/%i.pid +ExecStart=/usr/sbin/openvpn --daemon --writepid /var/run/openvpn/%i.pid --cd /etc/openvpn/ --config %i.conf +CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH +LimitNPROC=10 +DeviceAllow=/dev/null rw +DeviceAllow=/dev/net/tun rw + +[Install] +WantedBy=multi-user.target |