33 lines
1.0 KiB
Desktop File
33 lines
1.0 KiB
Desktop File
[Unit]
|
|
Description=OpenVPN Server routed for Roadwariors
|
|
After=network.service
|
|
ConditionPathExists=/etc/openvpn/routed/priv/key.pem
|
|
ConditionPathExists=/etc/openvpn/routed/pub/cert.pem
|
|
ConditionPathExists=/etc/openvpn/routed/pub/cacert.pem
|
|
ConditionPathExists=/etc/openvpn/routed/pub/dh.pem
|
|
# /etc/openvpn/routed/priv/takey.pem is optional
|
|
|
|
[Service]
|
|
Type=notify
|
|
PrivateTmp=true
|
|
WorkingDirectory=/etc/openvpn/routed
|
|
PermissionsStartOnly=true
|
|
|
|
ExecStartPre=-/sbin/e-smith/service-status 'openvpn-routed'
|
|
ExecStartPre=-/sbin/e-smith/systemd/openvpn-routed
|
|
ExecStart=/usr/sbin/openvpn --ncp-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC:AES-128-CBC:BF-CBC --config /etc/openvpn/routed/openvpn.conf --cd /etc/openvpn/routed
|
|
|
|
PrivateTmp=true
|
|
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
|
|
LimitNPROC=10
|
|
DeviceAllow=/dev/null rw
|
|
DeviceAllow=/dev/net/tun rw
|
|
KillMode=process
|
|
RestartSec=5s
|
|
Restart=on-failure
|
|
|
|
|
|
[Install]
|
|
WantedBy=sme-server.target
|
|
|