Skip to content

Commit

Permalink
comment new params
Browse files Browse the repository at this point in the history
  • Loading branch information
mmatur authored and traefiker committed Jan 7, 2019
1 parent 9384f3a commit c311a12
Showing 1 changed file with 12 additions and 12 deletions.
24 changes: 12 additions & 12 deletions contrib/systemd/traefik.service
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
[Unit]
Description=Traefik
Documentation=https://docs.traefik.io
After=network-online.target
AssertFileIsExecutable=/usr/bin/traefik
AssertPathExists=/etc/traefik/traefik.toml
#After=network-online.target
#AssertFileIsExecutable=/usr/bin/traefik
#AssertPathExists=/etc/traefik/traefik.toml

[Service]
# Run traefik as its own user (create new user with: useradd -r -s /bin/false -U -M traefik)
Expand All @@ -12,30 +12,30 @@ AssertPathExists=/etc/traefik/traefik.toml

# configure service behavior
Type=notify
ExecStart=/usr/bin/traefik --configFile=/etc/traefik/traefik.toml
#ExecStart=/usr/bin/traefik --configFile=/etc/traefik/traefik.toml
Restart=always
WatchdogSec=1s

# lock down system access
# prohibit any operating system and configuration modification
ProtectSystem=strict
#ProtectSystem=strict
# create separate, new (and empty) /tmp and /var/tmp filesystems
PrivateTmp=true
#PrivateTmp=true
# make /home directories inaccessible
ProtectHome=true
#ProtectHome=true
# turns off access to physical devices (/dev/...)
PrivateDevices=true
#PrivateDevices=true
# make kernel settings (procfs and sysfs) read-only
ProtectKernelTunables=true
#ProtectKernelTunables=true
# make cgroups /sys/fs/cgroup read-only
ProtectControlGroups=true
#ProtectControlGroups=true

# allow writing of acme.json
ReadWritePaths=/etc/traefik/acme.json
#ReadWritePaths=/etc/traefik/acme.json
# depending on log and entrypoint configuration, you may need to allow writing to other paths, too

# limit number of processes in this unit
LimitNPROC=1
#LimitNPROC=1

[Install]
WantedBy=multi-user.target

0 comments on commit c311a12

Please sign in to comment.