Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-01-25 12:56:54 -05:00
Code Issues Packages Projects Releases Wiki Activity
graphene-os-server-infrastr.../systemd/system/certbot-renew.service.d/mail.grapheneos.org.conf

5 lines
113 B
Plaintext
Raw Normal View History

initial certbot-renew service hardening This doesn't switch to using a dedicated certbot user yet since the hooks used across the services will all still need to work.
2022-08-10 11:29:37 -04:00
[Service]
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
PrivateUsers=false
Reference in New Issue Copy Permalink