crowdsec.service

#
# Copyright (C) 2022 Nethesis S.r.l.
# SPDX-License-Identifier: GPL-3.0-or-later
#

#
# This systemd unit starts a crowdsec instance using Podman.
# Most parts of this file come from podman-generate-systemd.
#

[Unit]
Description=crowdsec server
After=network.target

[Service]
Environment=PODMAN_SYSTEMD_UNIT=%n
EnvironmentFile=/var/lib/nethserver/%N/state/environment
WorkingDirectory=/var/lib/nethserver/%N/state
SyslogIdentifier=%N
Restart=always
TimeoutStopSec=70
ExecStartPre=/bin/rm -f %t/%N.pid %t/%N.cid
ExecStartPre=/bin/mkdir -vp crowdsec_config/postoverflows/s01-whitelist
ExecStartPre=/bin/mkdir -vp crowdsec_config/parsers/s02-enrich
ExecStartPre=/usr/local/bin/runagent -m %N expand-configuration
ExecStartPre=/usr/local/bin/runagent -m %N expand-smarthost
SuccessExitStatus=143
ExecStart=/usr/bin/podman run \
    --detach \
    --init \
    --privileged \
    --conmon-pidfile %t/%N.pid \
    --cidfile %t/%N.cid \
    --cgroups=no-conmon \
    --replace --name=%N \
    --network=host \
    --env DISABLE_ONLINE_API=${DISABLE_ONLINE_API} \
    --volume  ./crowdsec_config:/etc/crowdsec:Z \
    --volume %N-data:/var/lib/crowdsec/data:Z \
    --volume ${CROWDSEC_JOURNAL}:/run/log/journal \
    ${CROWDSEC_IMAGE}
ExecStop=/usr/bin/podman stop --ignore --cidfile %t/%N.cid -t 10
ExecStopPost=/usr/bin/podman rm --ignore -f --cidfile %t/%N.cid
ExecReload=/usr/local/bin/runagent -m %N expand-configuration
ExecReload=/usr/local/bin/runagent -m %N expand-smarthost
ExecReload=/usr/bin/podman kill -s HUP %N
PIDFile=%t/%N.pid
Type=forking

[Install]
WantedBy=default.target