mirror of
https://github.com/GrapheneOS/infrastructure.git
synced 2024-10-01 04:55:42 +00:00
give certbot access to /etc/nginx/ocsp-cache
This commit is contained in:
parent
2cf0966847
commit
8482ac5144
@ -18,7 +18,7 @@ ProtectKernelModules=true
|
|||||||
ProtectKernelTunables=true
|
ProtectKernelTunables=true
|
||||||
ProtectProc=invisible
|
ProtectProc=invisible
|
||||||
ProtectSystem=strict
|
ProtectSystem=strict
|
||||||
ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/certbot
|
ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/certbot /etc/nginx/ocsp-cache
|
||||||
RemoveIPC=true
|
RemoveIPC=true
|
||||||
RestrictAddressFamilies=AF_INET AF_INET6
|
RestrictAddressFamilies=AF_INET AF_INET6
|
||||||
RestrictNamespaces=true
|
RestrictNamespaces=true
|
||||||
|
Loading…
Reference in New Issue
Block a user