Jean-Philippe Pialasse
aecee0e087
- add X-Content-Type-Options nosniff [SME: 12835] - add Strict Transport Security support HSTS [SME: 12815] - add X-Frame-Options SAMEORIGIN Header to prevent clickjacking [SME: 12816] - add referrer-Policy same-origin [SME: 12817] - add OCSP Stapling support [SME: 12819] - add CSP Content-Security-Policy support [SME: 9567] - add .well-known and .well-known/security.txt [SME: 12818]
27 lines
1.0 KiB
Desktop File
27 lines
1.0 KiB
Desktop File
[Unit]
|
|
Description=httpd-e-smith The Koozali SME Server Apache HTTP Service
|
|
After=network-online.target remote-fs.target
|
|
Documentation=man:httpd(8)
|
|
Documentation=man:apachectl(8)
|
|
|
|
[Service]
|
|
Type=notify
|
|
ExecStartPre=/sbin/e-smith/service-status httpd-e-smith
|
|
ExecStartPre=/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
|
|
ExecStartPre=-/sbin/e-smith/expand-template /var/www/html/.well-known/security.txt
|
|
ExecStartPre=/sbin/e-smith/systemd/httpd-e-smith-prepare
|
|
ExecStart=/usr/sbin/httpd -f /etc/httpd/conf/httpd.conf -DFOREGROUND
|
|
ExecReload=/usr/sbin/httpd -f /etc/httpd/conf/httpd.conf -k graceful
|
|
ExecStop=/bin/kill -WINCH ${MAINPID}
|
|
# We want systemd to give httpd some time to finish gracefully, but still want
|
|
# it to kill httpd after TimeoutStopSec if something went wrong during the
|
|
# graceful stop. Normally, Systemd sends SIGTERM signal right after the
|
|
# ExecStop, which would kill httpd. We are sending useless SIGCONT here to give
|
|
# httpd time to finish.
|
|
KillSignal=SIGCONT
|
|
PrivateTmp=true
|
|
|
|
[Install]
|
|
WantedBy=sme-server.target
|
|
|