summarylogtreecommitdiffstats
path: root/vmauth.service
blob: 0de675736f36235e2abd8ba421a827242566786d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
[Unit]
Description=vmauth - HTTP proxy, which authorize, route and load balance requests across VictoriaMetrics components
Documentation=https://docs.victoriametrics.com/cluster-victoriametrics
Requires=network-online.target
After=network-online.target nss-lookup.target basic.target
Wants=network-online.target nss-lookup.target

[Service]
User=victoriametrics
Group=victoriametrics
EnvironmentFile=-/etc/conf.d/vmauth
ExecStart=/usr/bin/vmauth --auth.config="/etc/victoriametrics/vmauth.yml" --loggerDisableTimestamps --loggerOutput="stdout" $VMAUTH_ARGS
ExecStop=/bin/kill -s SIGTERM $MAINPID
ExecReload=/bin/kill -HUP $MAINPID
LimitNOFILE=1048576
LimitNPROC=1048576
SyslogIdentifier=vmauth
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=full
ProtectHostname=true
ProtectControlGroups=true
ProtectKernelModules=true
ProtectKernelTunables=true
LockPersonality=true
RestrictRealtime=true
RestrictNamespaces=true
MemoryDenyWriteExecute=true
PrivateDevices=true
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE

[Install]
WantedBy=multi-user.target