diff options
| author | Andrew Guschin <guschin@altlinux.org> | 2026-10-30 03:10:41 +0400 |
|---|---|---|
| committer | Andrew Guschin <guschin@altlinux.org> | 2026-10-30 03:10:41 +0400 |
| commit | d608ffeeda1a479c9dc0e5f6ad269ba07a510d7f (patch) | |
| tree | 3824ec9da5ca0adac913cc47e3e20054c3dc843a /assets/roentgen-xray.service | |
| parent | 40cf3276cdc74bf6f1795990ed600891a637d1fe (diff) | |
Implement Linux proxy controller, subscription state, and CLI/TUI
Diffstat (limited to 'assets/roentgen-xray.service')
| -rw-r--r-- | assets/roentgen-xray.service | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/assets/roentgen-xray.service b/assets/roentgen-xray.service new file mode 100644 index 0000000..7cbdaea --- /dev/null +++ b/assets/roentgen-xray.service @@ -0,0 +1,19 @@ +[Unit] +Description=Roentgen-owned system Xray process +Requires=roentgen-guard.service +After=roentgen-guard.service + +[Service] +Type=simple +User=roentgen-xray +Group=roentgen-xray +ExecStart=/usr/bin/xray run -config /run/roentgen/xray.json +Restart=on-failure +RestartSec=5 +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW +NoNewPrivileges=yes +PrivateTmp=yes +ProtectHome=yes +ProtectSystem=strict +UMask=0077 |