| 12345678910111213141516171819202122232425 |
- [Unit]
- Description=OpenVPN service for %I
- After=syslog.target network-online.target
- Wants=network-online.target
- Documentation=man:openvpn(8)
- Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
- Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO
- [Service]
- Type=notify
- PrivateTmp=true
- WorkingDirectory=/etc/openvpn/server
- ExecStart=@sbindir@/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --config %i.conf
- CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
- LimitNPROC=10
- DeviceAllow=/dev/null rw
- DeviceAllow=/dev/net/tun rw
- ProtectSystem=true
- ProtectHome=true
- KillMode=process
- RestartSec=5s
- Restart=on-failure
- [Install]
- WantedBy=multi-user.target
|
