2017-07-24 17:16:40 +08:00
|
|
|
[Unit]
|
|
|
|
|
Description=Glider Service (%i)
|
2018-05-27 21:41:04 +08:00
|
|
|
After=network.target iptables.service ip6tables.service
|
2017-07-24 17:16:40 +08:00
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
Type=simple
|
|
|
|
|
User=nobody
|
|
|
|
|
Restart=always
|
2019-01-06 20:38:15 +08:00
|
|
|
LimitNOFILE=102400
|
2017-08-24 11:58:32 +08:00
|
|
|
|
2020-11-03 22:52:50 +08:00
|
|
|
# NOTE: CHANGE to your glider path
|
2017-07-24 17:16:40 +08:00
|
|
|
ExecStart=/usr/bin/glider -config /etc/glider/%i.conf
|
|
|
|
|
|
2020-11-03 22:52:50 +08:00
|
|
|
# NOTE:
|
2017-08-24 11:58:32 +08:00
|
|
|
# work with systemd v229 or later, so glider can listen on port below 1024 with none-root user
|
2017-08-28 23:14:52 +08:00
|
|
|
# CAP_NET_ADMIN: ipset
|
|
|
|
|
# CAP_NET_BIND_SERVICE: bind ports under 1024
|
2020-09-28 00:49:58 +08:00
|
|
|
# CAP_NET_RAW: bind raw socket and broadcasting (used by dhcpd)
|
|
|
|
|
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
|
|
|
|
|
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
|
2017-08-24 11:58:32 +08:00
|
|
|
NoNewPrivileges=true
|
|
|
|
|
|
2017-07-24 17:16:40 +08:00
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
