| 192 |
- |
1 |
[Unit]
|
|
|
2 |
Description=OpenVPN service for %I
|
|
|
3 |
After=syslog.target network-online.target
|
|
|
4 |
Wants=network-online.target
|
|
|
5 |
Documentation=man:openvpn(8)
|
|
|
6 |
Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
|
|
|
7 |
Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO
|
|
|
8 |
|
|
|
9 |
[Service]
|
|
|
10 |
Type=notify
|
|
|
11 |
PrivateTmp=true
|
|
|
12 |
WorkingDirectory=/etc/openvpn
|
|
|
13 |
ExecStart=/usr/sbin/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --cipher AES-256-GCM --ncp-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC:AES-128-CBC:BF-CBC --config %i.conf
|
|
|
14 |
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
|
|
|
15 |
#LimitNPROC=10
|
|
|
16 |
DeviceAllow=/dev/null rw
|
|
|
17 |
DeviceAllow=/dev/net/tun rw
|
|
|
18 |
ProtectSystem=true
|
|
|
19 |
ProtectHome=true
|
|
|
20 |
KillMode=process
|
|
|
21 |
RestartSec=5s
|
|
|
22 |
Restart=on-failure
|
|
|
23 |
|
|
|
24 |
[Install]
|
|
|
25 |
WantedBy=multi-user.target
|