diff options
Diffstat (limited to 'assets/roentgen-xray.service')
| -rw-r--r-- | assets/roentgen-xray.service | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/assets/roentgen-xray.service b/assets/roentgen-xray.service new file mode 100644 index 0000000..7cbdaea --- /dev/null +++ b/assets/roentgen-xray.service @@ -0,0 +1,19 @@ +[Unit] +Description=Roentgen-owned system Xray process +Requires=roentgen-guard.service +After=roentgen-guard.service + +[Service] +Type=simple +User=roentgen-xray +Group=roentgen-xray +ExecStart=/usr/bin/xray run -config /run/roentgen/xray.json +Restart=on-failure +RestartSec=5 +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW +NoNewPrivileges=yes +PrivateTmp=yes +ProtectHome=yes +ProtectSystem=strict +UMask=0077 |