mirror of
https://github.com/coder/coder.git
synced 2025-07-06 15:41:45 +00:00
0052e6a21b
* add CAP_NET_BIND_SERVICE to systemd unit Co-authored-by: Mathias Fredriksson <mafredri@gmail.com>
31 lines
720 B
Desktop File
31 lines
720 B
Desktop File
[Unit]
|
|
Description="Coder - Self-hosted developer workspaces on your infra"
|
|
Documentation=https://coder.com/docs/
|
|
Requires=network-online.target
|
|
After=network-online.target
|
|
ConditionFileNotEmpty=/etc/coder.d/coder.env
|
|
StartLimitIntervalSec=60
|
|
StartLimitBurst=3
|
|
|
|
[Service]
|
|
Type=notify
|
|
EnvironmentFile=/etc/coder.d/coder.env
|
|
User=coder
|
|
Group=coder
|
|
ProtectSystem=full
|
|
PrivateTmp=yes
|
|
PrivateDevices=yes
|
|
SecureBits=keep-caps
|
|
AmbientCapabilities=CAP_IPC_LOCK CAP_NET_BIND_SERVICE
|
|
CacheDirectory=coder
|
|
CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK CAP_NET_BIND_SERVICE
|
|
KillSignal=SIGINT
|
|
NoNewPrivileges=yes
|
|
ExecStart=/usr/bin/coder server
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
TimeoutStopSec=30
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|