mirror of
https://github.com/coder/coder.git
synced 2025-07-12 00:14:10 +00:00
39e5fcfd61
This caused an inability to listen on privileged ports and read certs from LetsEncrypt. It seems more hurtful rather than helpful, so removing the restriction seems reasonable.
28 lines
658 B
Desktop File
28 lines
658 B
Desktop File
[Unit]
|
|
Description="Coder - Self-hosted developer workspaces on your infra"
|
|
Documentation=https://coder.com/docs/
|
|
Requires=network-online.target
|
|
After=network-online.target
|
|
ConditionFileNotEmpty=/etc/coder.d/coder.env
|
|
StartLimitIntervalSec=60
|
|
StartLimitBurst=3
|
|
|
|
[Service]
|
|
Type=notify
|
|
EnvironmentFile=/etc/coder.d/coder.env
|
|
ProtectSystem=full
|
|
ProtectHome=read-only
|
|
PrivateTmp=yes
|
|
PrivateDevices=yes
|
|
SecureBits=keep-caps
|
|
AmbientCapabilities=CAP_IPC_LOCK
|
|
CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK CAP_NET_BIND_SERVICE
|
|
NoNewPrivileges=yes
|
|
ExecStart=/usr/bin/coder start
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
TimeoutStopSec=30
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|