Files
the-littlest-jupyterhub/tljh/systemd-units/traefik.service
Min RK 8e75a44502 grant traefik write access to state/acme.json
and ensure the file exists and is private before launching
2018-07-30 15:26:09 +02:00

25 lines
664 B
Desktop File

# Template file for Traefik systemd service
# Uses simple string.format() for 'templating'
[Unit]
# Wait for network stack to be fully up before starting proxy
After=network.target
[Service]
User=root
Restart=always
# process only needs to write state/acme.json file, no other files
ProtectHome=tmpfs
ProtectSystem=strict
PrivateTmp=yes
PrivateDevices=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ReadWritePaths={install_prefix}/state/acme.json
WorkingDirectory={install_prefix}/state
ExecStart={install_prefix}/hub/bin/traefik \
-c {install_prefix}/state/traefik.toml
[Install]
# Start service when system boots
WantedBy=multi-user.target