diff --git a/systemd/system/certbot-renew.service.d/local.conf b/systemd/system/certbot-renew.service.d/local.conf index 6d1e93b..d5f03ca 100644 --- a/systemd/system/certbot-renew.service.d/local.conf +++ b/systemd/system/certbot-renew.service.d/local.conf @@ -19,7 +19,6 @@ ProtectKernelTunables=true ProtectProc=invisible ProtectSystem=strict ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/certbot -/etc/nginx/ocsp-cache -RemoveIPC=true RestrictAddressFamilies=AF_INET AF_INET6 RestrictNamespaces=true RestrictRealtime=true diff --git a/systemd/system/nginx.service.d/local.conf b/systemd/system/nginx.service.d/local.conf index cb95935..56e7e50 100644 --- a/systemd/system/nginx.service.d/local.conf +++ b/systemd/system/nginx.service.d/local.conf @@ -18,7 +18,6 @@ ProtectKernelTunables=true ProtectProc=invisible ProtectSystem=strict ReadWritePaths=/var/lib/nginx /var/log/nginx -/var/cache/nginx -RemoveIPC=true Restart=always RestartSec=1 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX