nginx: drop ExecStart override

This commit is contained in:
Daniel Micay 2023-09-18 02:41:59 -04:00
parent 90411f367c
commit 15f1cbcd02

View File

@ -1,7 +1,5 @@
[Service]
CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_NET_BIND_SERVICE CAP_SETUID CAP_SETGID
ExecStart=
ExecStart=/usr/bin/nginx -g 'pid /run/nginx.pid;'
LockPersonality=true
NoNewPrivileges=true
MemoryDenyWriteExecute=true