Drop syslog.target and systemd-managed /var/run
The systemd target "syslog.target" and not required because syslog is socket activated. The directory /var/run is usually a symlink to /run and its created by systemd via the RuntimeDirectory=headscale option. System creates and handles permissions, no need to manually mark it as a read-write path.
This commit is contained in:
parent
4a941a2cb4
commit
43c9c50af4
1 changed files with 1 additions and 2 deletions
|
@ -1,5 +1,4 @@
|
||||||
[Unit]
|
[Unit]
|
||||||
After=syslog.target
|
|
||||||
After=network.target
|
After=network.target
|
||||||
Description=headscale coordination server for Tailscale
|
Description=headscale coordination server for Tailscale
|
||||||
X-Restart-Triggers=/etc/headscale/config.yaml
|
X-Restart-Triggers=/etc/headscale/config.yaml
|
||||||
|
@ -14,7 +13,7 @@ Restart=always
|
||||||
RestartSec=5
|
RestartSec=5
|
||||||
|
|
||||||
WorkingDirectory=/var/lib/headscale
|
WorkingDirectory=/var/lib/headscale
|
||||||
ReadWritePaths=/var/lib/headscale /var/run
|
ReadWritePaths=/var/lib/headscale
|
||||||
|
|
||||||
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
|
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
|
||||||
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
|
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue