msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-13 19:27:02 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

systemd: Whitelist /etc/logs for caddy

Browse source 
Signed-off-by: Harsh Shandilya <msfjarvis@gmail.com>
This commit is contained in:
Harsh Shandilya 2019-12-16 21:39:08 +05:30
parent d4bb5a54d6
commit 550c78dfeb
No known key found for this signature in database
GPG key ID: C2E74282C2133D62
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
systemd_units/caddy.service
View file

@ -20,7 +20,7 @@ PrivateTmp=true
PrivateDevices=true PrivateDevices=true
ProtectHome=true ProtectHome=true
ProtectSystem=full ProtectSystem=full
ReadWriteDirectories=/etc/ssl/caddy ReadWriteDirectories=/etc/ssl/caddy /etc/logs
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_BIND_SERVICE
NoNewPrivileges=true NoNewPrivileges=true