diff options
Diffstat (limited to 'roles/elevate/dolmetsch-raspi/templates')
| -rw-r--r-- | roles/elevate/dolmetsch-raspi/templates/dolmetschctl.service.j2 | 18 | ||||
| -rw-r--r-- | roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2 | 17 |
2 files changed, 35 insertions, 0 deletions
diff --git a/roles/elevate/dolmetsch-raspi/templates/dolmetschctl.service.j2 b/roles/elevate/dolmetsch-raspi/templates/dolmetschctl.service.j2 new file mode 100644 index 00000000..53ce6734 --- /dev/null +++ b/roles/elevate/dolmetsch-raspi/templates/dolmetschctl.service.j2 @@ -0,0 +1,18 @@ +[Unit] +Description=dolmetschctl Client + +[Service] +{# TODO: remove hardcoded IP #} +ExecStart=/opt/dolmetschctl/bin/dolmetschctl 192.168.48.102:8234 +CapabilityBoundingSet=CAP_NET_BIND_SERVICE +NoNewPrivileges=yes +PrivateTmp=yes +ProtectSystem=strict +ProtectHome=yes +ProtectKernelTunables=yes +ProtectControlGroups=yes +RestrictRealtime=yes +RestrictAddressFamilies=AF_INET AF_INET6 + +[Install] +WantedBy=multi-user.target diff --git a/roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2 b/roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2 new file mode 100644 index 00000000..d26d1313 --- /dev/null +++ b/roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2 @@ -0,0 +1,17 @@ +[Unit] +Description=dolmetschctl Server + +[Service] +ExecStart=/opt/dolmetschctl/bin/dolmetschctld +CapabilityBoundingSet=CAP_NET_BIND_SERVICE +NoNewPrivileges=yes +PrivateTmp=yes +ProtectSystem=strict +ProtectHome=yes +ProtectKernelTunables=yes +ProtectControlGroups=yes +RestrictRealtime=yes +RestrictAddressFamilies=AF_INET AF_INET6 + +[Install] +WantedBy=multi-user.target |