zhangyiss/the-littlest-jupyterhub
1
0
Fork 0
mirror of https://github.com/jupyterhub/the-littlest-jupyterhub.git synced 2025-12-18 21:54:05 +08:00
Code Issues Packages Projects Releases Wiki Activity

grant traefik write access to state/acme.json

Browse Source 
and ensure the file exists and is private before launching
This commit is contained in:
Min RK
2018-07-30 15:26:09 +02:00
parent 7f07bfbec4
commit 8e75a44502
2 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
tljh/systemd-units/traefik.service
View File

@@ -7,13 +7,14 @@ After=network.target
[Service]
User=root
Restart=always
# process only needs to write acme.json file, no other files
# process only needs to write state/acme.json file, no other files
ProtectHome=tmpfs
ProtectSystem=strict
PrivateTmp=yes
PrivateDevices=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ReadWritePaths={install_prefix}/state/acme.json
WorkingDirectory={install_prefix}/state
ExecStart={install_prefix}/hub/bin/traefik \
-c {install_prefix}/state/traefik.toml