blob: 7cbdaea833576e8c9d544b88fa0a723a9bea6d6a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
[Unit]
Description=Roentgen-owned system Xray process
Requires=roentgen-guard.service
After=roentgen-guard.service
[Service]
Type=simple
User=roentgen-xray
Group=roentgen-xray
ExecStart=/usr/bin/xray run -config /run/roentgen/xray.json
Restart=on-failure
RestartSec=5
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW
NoNewPrivileges=yes
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=strict
UMask=0077
|
