- Fix start failure by systemd
* Make sure /etc/shadowsocks can be read by shadowsocks user * Create the PID under /run/shadowsocks OBS-URL: https://build.opensuse.org/package/show/server:proxy/shadowsocks-libev?expand=0&rev=59
This commit is contained in:
28
shadowsocks-libev-client.service
Normal file
28
shadowsocks-libev-client.service
Normal file
@@ -0,0 +1,28 @@
|
||||
[Unit]
|
||||
Description=Daemon to start Shadowsocks-libev-client
|
||||
Wants=network-online.target
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
# added automatically, for details please see
|
||||
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||
ProtectSystem=full
|
||||
ProtectHome=true
|
||||
PrivateDevices=true
|
||||
ProtectHostname=true
|
||||
ProtectClock=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelLogs=true
|
||||
ProtectControlGroups=true
|
||||
RestrictRealtime=true
|
||||
# end of automatic additions
|
||||
Type=forking
|
||||
PIDFile=/run/shadowsocks/shadowsocks-libev-client.pid
|
||||
ExecStart=/usr/bin/ss-local -c /etc/shadowsocks/shadowsocks-libev-config.json -f /run/shadowsocks/shadowsocks-libev-client.pid -u --fast-open
|
||||
Restart=on-failure
|
||||
User=shadowsocks
|
||||
Group=shadowsocks
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
Reference in New Issue
Block a user