diff options
author | Christian Pointner <equinox@spreadspace.org> | 2023-08-30 15:07:28 +0200 |
---|---|---|
committer | Christian Pointner <equinox@spreadspace.org> | 2023-08-30 15:07:28 +0200 |
commit | ac9829aad8a0e2266eca9132f26ef541b80bf7f3 (patch) | |
tree | 0e74d59267e93f9258da0e3e5ae60dd9f6299880 /roles/gitolite/base/templates/git-fsck@.service.j2 | |
parent | prometheus/smartmon textfile collector: since this unit needs CAP_SYS_ADMIN w... (diff) |
gitolite: allow custom user to be defined and refactor handling of http role
Diffstat (limited to 'roles/gitolite/base/templates/git-fsck@.service.j2')
-rw-r--r-- | roles/gitolite/base/templates/git-fsck@.service.j2 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/gitolite/base/templates/git-fsck@.service.j2 b/roles/gitolite/base/templates/git-fsck@.service.j2 index 51bf43d9..ce5b7373 100644 --- a/roles/gitolite/base/templates/git-fsck@.service.j2 +++ b/roles/gitolite/base/templates/git-fsck@.service.j2 @@ -21,7 +21,7 @@ ProtectHome=yes ProtectKernelModules=true ProtectKernelTunables=true ProtectSystem=strict -ReadWritePaths=/var/lib/prometheus-node-exporter/textfile-collector +ReadWritePaths=-/var/lib/prometheus-node-exporter/textfile-collector RemoveIPC=true RestrictNamespaces=true RestrictRealtime=true |