finallycoffee/base
2
0
Fork 1
Code Issues 1 Pull Requests 3 Packages Projects Releases Wiki Activity

Add cap_net_bind capabilities to systemd unit and ensure correct permissions #8

Manually merged
jadyn merged 2 commits from jadyn/finallycoffee.base:main into main 2024-09-12 06:01:58 +00:00
Conversation 0 Commits 2 Files Changed 3 +1
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 5f4fbd492c - Show all commits

1
roles/lego/templates/lego@.service.j2
View File

@ -7,6 +7,7 @@ EnvironmentFile={{ lego_base_path }}/%i.conf
User={{ lego_systemd_user }}
Group={{ lego_systemd_group }}
ExecStart={{ lego_base_path }}/run.sh
AmbientCapabilities=CAP_NET_BIND_SERVICE
[Install]
WantedBy=basic.target