Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2024-07-28 05:32:01 +00:00
Code Issues Packages Projects Releases Wiki Activity
6223daec3f
graphene-os-server-infrastr.../systemd/system/certbot-renew.service.d/mail.grapheneos.org.conf

5 lines
113 B
Plaintext
Raw Normal View History

initial certbot-renew service hardening This doesn't switch to using a dedicated certbot user yet since the hooks used across the services will all still need to work.
2022-08-10 15:29:37 +00:00
[Service]
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
PrivateUsers=false
Reference in New Issue Copy Permalink