2012-06-24 21:16:00 +08:00
|
|
|
[Unit]
|
|
|
|
|
Description=OpenVPN connection to %i
|
|
|
|
|
|
|
|
|
|
[Service]
|
2016-05-13 10:29:28 +08:00
|
|
|
PrivateTmp=true
|
2012-06-24 21:16:00 +08:00
|
|
|
Type=forking
|
2016-05-13 10:29:28 +08:00
|
|
|
ExecStart=/usr/bin/openvpn --cd /etc/openvpn --config /etc/openvpn/%i.conf --daemon openvpn@%i --writepid /run/openvpn@%i.pid --status-version 2
|
2014-11-10 07:46:32 +08:00
|
|
|
PIDFile=/run/openvpn@%i.pid
|
2016-05-13 10:29:28 +08:00
|
|
|
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH
|
|
|
|
|
LimitNPROC=10
|
|
|
|
|
DeviceAllow=/dev/null rw
|
|
|
|
|
DeviceAllow=/dev/net/tun rw
|
2012-06-24 21:16:00 +08:00
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
