diff --git a/systemd/system/nginx.service.d/local.conf b/systemd/system/nginx.service.d/local.conf index 3106706..0c662c1 100644 --- a/systemd/system/nginx.service.d/local.conf +++ b/systemd/system/nginx.service.d/local.conf @@ -21,6 +21,8 @@ RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX RestrictNamespaces=true RestrictRealtime=true RestrictSUIDSGID=true +RuntimeDirectory=nginx +RuntimeDirectoryMode=700 SystemCallArchitectures=native SystemCallFilter=@system-service SystemCallFilter=~@obsolete diff --git a/tmpfiles.d/local-nginx.conf b/tmpfiles.d/local-nginx.conf deleted file mode 100644 index ea2e6e0..0000000 --- a/tmpfiles.d/local-nginx.conf +++ /dev/null @@ -1 +0,0 @@ -d /run/nginx 0750 root http -