yggdrasil-network/yggdrasil-go
1
0
Fork 0
mirror of https://github.com/yggdrasil-network/yggdrasil-go.git synced 2025-05-21 09:25:07 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Prevent systemd service from generating a config readable by everyone

Browse source
This commit is contained in:
mirefly42 2025-05-02 15:41:26 +07:00
parent 9cf0a75940
commit d372b033b6
2 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
contrib/systemd/yggdrasil-default-config.service
View file

@ -8,6 +8,7 @@ After=local-fs.target
[Service] [Service]
Type=oneshot Type=oneshot
Group=yggdrasil Group=yggdrasil
UMask=037
StandardOutput=file:/etc/yggdrasil.conf StandardOutput=file:/etc/yggdrasil.conf
ExecStart=/usr/bin/yggdrasil -genconf ExecStart=/usr/bin/yggdrasil -genconf
ExecStartPost=/usr/bin/chmod 0640 /etc/yggdrasil.conf ExecStartPost=/usr/bin/chmod 0640 /etc/yggdrasil.conf

1
contrib/systemd/yggdrasil-default-config.service.debian
View file

@ -8,6 +8,7 @@ After=local-fs.target
[Service] [Service]
Type=oneshot Type=oneshot
Group=yggdrasil Group=yggdrasil
UMask=037
ExecStartPre=/usr/bin/mkdir -p /etc/yggdrasil ExecStartPre=/usr/bin/mkdir -p /etc/yggdrasil
ExecStart=/usr/bin/yggdrasil -genconf > /etc/yggdrasil/yggdrasil.conf ExecStart=/usr/bin/yggdrasil -genconf > /etc/yggdrasil/yggdrasil.conf
ExecStartPost=/usr/bin/chmod -R 0640 /etc/yggdrasil ExecStartPost=/usr/bin/chmod -R 0640 /etc/yggdrasil