diff options
author | Melvin Vermeeren | 2018-04-28 21:17:15 +0200 |
---|---|---|
committer | Melvin Vermeeren | 2018-04-28 21:17:15 +0200 |
commit | 78e36895449e65617103fe43b741e81cc0a135ae (patch) | |
tree | 80fcdb203fab631894b3325fbe0dca9f27c7fe56 /gitlab-pages.service | |
parent | 2ec34ddeb22a246ba5162e0fc105339d18f3bc16 (diff) | |
download | aur-78e36895449e65617103fe43b741e81cc0a135ae.tar.gz |
update to v0.9.0, also chroot by default
Diffstat (limited to 'gitlab-pages.service')
-rw-r--r-- | gitlab-pages.service | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/gitlab-pages.service b/gitlab-pages.service index f3252552e68e..689e55396060 100644 --- a/gitlab-pages.service +++ b/gitlab-pages.service @@ -4,11 +4,15 @@ After=syslog.target network.target ConditionFileIsExecutable=/usr/bin/gitlab-pages [Service] -User=gitlab -Group=gitlab +User=root +Group=root StartLimitInterval=5 StartLimitBurst=10 -ExecStart=/usr/bin/gitlab-pages -config /etc/gitlab-pages/config.cfg +# systemd cannot handle User=${...}, so wrap it in ExecStart instead +EnvironmentFile=/etc/gitlab-pages/service.env +ExecStart=/usr/bin/setpriv --inh-caps=-all --clear-groups \ + --reuid=${GITLAB_PAGES_UID} --regid=${GITLAB_PAGES_GID} \ + /usr/bin/gitlab-pages -config /etc/gitlab-pages/config.cfg Restart=always RestartSec=120 StandardOutput=syslog @@ -17,7 +21,6 @@ SyslogIdentifier=gitlab-pages PrivateTmp=true ProtectSystem=full ProtectHome=true -CapabilityBoundingSet= [Install] WantedBy=multi-user.target |