git.iko.soy/typeable/oauth2-proxy
on master help sign in
typeable/oauth2-proxy/contrib/oauth2-proxy.service.example
33 lines 800 B history raw
1[Unit]
2Description=oauth2-proxy daemon service
3After=network.target network-online.target nss-lookup.target basic.target
4Wants=network-online.target nss-lookup.target
5StartLimitIntervalSec=30
6StartLimitBurst=3
8[Service]
9User=oauth2-proxy
10Group=oauth2-proxy
11Restart=on-failure
12RestartSec=30
13WorkingDirectory=/etc/oauth2-proxy
14ExecStart=/usr/bin/oauth2-proxy --config=/etc/oauth2-proxy/oauth2-proxy.cfg
15ExecReload=/bin/kill -HUP $MAINPID
16LimitNOFILE=65535
17NoNewPrivileges=true
18ProtectHome=true
19ProtectSystem=full
20ProtectHostname=true
21ProtectControlGroups=true
22ProtectKernelModules=true
23ProtectKernelTunables=true
24LockPersonality=true
25RestrictRealtime=yes
26RestrictNamespaces=yes
27MemoryDenyWriteExecute=yes
28PrivateDevices=yes
29PrivateTmp=true
30CapabilityBoundingSet=
32[Install]
33WantedBy=multi-user.target