finallycoffee/base
5
0
Fork 1
Code Issues 2 Pull Requests 4 Packages Projects Releases Wiki Activity

Add cap_net_bind capabilities to systemd unit and ensure correct permissions #8

Manually merged
jadyn merged 2 commits from jadyn/finallycoffee.base:main into main 2024-09-12 06:01:58 +00:00
Conversation 1 Commits 2 Files Changed 3 +1
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 5f4fbd492c - Show all commits

1
roles/lego/templates/lego@.service.j2
View File

@@ -7,6 +7,7 @@ EnvironmentFile={{ lego_base_path }}/%i.conf
User={{ lego_systemd_user }} User={{ lego_systemd_user }}
Group={{ lego_systemd_group }} Group={{ lego_systemd_group }}
ExecStart={{ lego_base_path }}/run.sh ExecStart={{ lego_base_path }}/run.sh
AmbientCapabilities=CAP_NET_BIND_SERVICE
[Install] [Install]
WantedBy=basic.target WantedBy=basic.target