588e87590d
* add support for systemd, OpenRC, SysVinit, and Dinit * add automatic init-system detection through CMake * make libsystemd optional for non-systemd builds * add native service definitions for all supported init systems * add Gentoo ebuild and Alpine APKBUILD packaging support * publish the official BastionGuard source repository * update the README with supported distributions, init systems, repository information, and build documentation
28 lines
687 B
Desktop File
28 lines
687 B
Desktop File
[Unit]
|
|
StartLimitIntervalSec=0
|
|
Description=BastionGuard PAC daemon (per-user)
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
ExecStart=/usr/bin/bastionguard-pacd \
|
|
--listen 127.0.0.1 --port 8765 \
|
|
--stub-host 127.0.0.1 --stub-port 3129 \
|
|
--backend-host 127.0.0.1 --backend-port 3130 \
|
|
--trigger-cmd "/usr/libexec/bastionguard/bastionguard-service --user start BastionGuard-cef.service" \
|
|
--backend-wait-ms 4000
|
|
|
|
Restart=always
|
|
RestartSec=3s
|
|
TimeoutStopSec=5s
|
|
KillSignal=SIGTERM
|
|
KillMode=control-group
|
|
NoNewPrivileges=true
|
|
PrivateTmp=true
|
|
|
|
# Consigliato: limita rete a localhost (se vuoi hardening)
|
|
# IPAddressDeny=any
|
|
# IPAddressAllow=localhost
|
|
|
|
[Install]
|
|
WantedBy=default.target
|