public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

cjdns: Improving systemd unit description

Browse Source
This commit is contained in:
Sophie Taylor 2016-11-05 18:10:09 +10:00 committed by Graham Christensen
parent 880d616ec0
commit 016fa06c71
No known key found for this signature in database
GPG Key ID: ACA1C1D120C83D5C
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
nixos/modules/services/networking/cjdns.nix
View File

@ -198,8 +198,9 @@ in
systemd.services.cjdns = { systemd.services.cjdns = {
description = "cjdns: routing engine designed for security, scalability, speed and ease of use"; description = "cjdns: routing engine designed for security, scalability, speed and ease of use";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" "sleep.target"];
after = [ "network.target" ]; after = [ "network-online.target" ];
bindsTo = [ "network-online.target" ];
preStart = if cfg.confFile != null then "" else '' preStart = if cfg.confFile != null then "" else ''
[ -e /etc/cjdns.keys ] && source /etc/cjdns.keys [ -e /etc/cjdns.keys ] && source /etc/cjdns.keys
@ -235,7 +236,9 @@ in
serviceConfig = { serviceConfig = {
Type = "forking"; Type = "forking";
Restart = "on-failure"; Restart = "always";
StartLimitInterval = 0;
RestartSec = 1;
CapabilityBoundingSet = "CAP_NET_ADMIN CAP_NET_RAW"; CapabilityBoundingSet = "CAP_NET_ADMIN CAP_NET_RAW";
AmbientCapabilities = "CAP_NET_ADMIN CAP_NET_RAW"; AmbientCapabilities = "CAP_NET_ADMIN CAP_NET_RAW";
ProtectSystem = "full"; ProtectSystem = "full";