2018-07-21 00:20:29 -07:00
|
|
|
# Template file for Traefik systemd service
|
|
|
|
|
# Uses simple string.format() for 'templating'
|
|
|
|
|
[Unit]
|
|
|
|
|
# Wait for network stack to be fully up before starting proxy
|
|
|
|
|
After=network.target
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
User=root
|
|
|
|
|
Restart=always
|
2019-09-19 12:53:43 +03:00
|
|
|
# traefik process should have no access to home directories
|
|
|
|
|
ProtectHome=yes
|
2018-07-21 00:20:29 -07:00
|
|
|
ProtectSystem=strict
|
|
|
|
|
PrivateTmp=yes
|
|
|
|
|
PrivateDevices=yes
|
|
|
|
|
ProtectKernelTunables=yes
|
|
|
|
|
ProtectKernelModules=yes
|
2019-01-22 16:24:38 +02:00
|
|
|
ReadWritePaths={install_prefix}/state/rules.toml
|
2018-07-30 15:26:09 +02:00
|
|
|
ReadWritePaths={install_prefix}/state/acme.json
|
2018-07-21 00:20:29 -07:00
|
|
|
WorkingDirectory={install_prefix}/state
|
|
|
|
|
ExecStart={install_prefix}/hub/bin/traefik \
|
|
|
|
|
-c {install_prefix}/state/traefik.toml
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
# Start service when system boots
|
|
|
|
|
WantedBy=multi-user.target
|
