25 lines
725 B
Django/Jinja
25 lines
725 B
Django/Jinja
[Unit]
|
|
Description=OpenVPN tunnel for %I
|
|
After=syslog.target network-online.target
|
|
Wants=network-online.target
|
|
Documentation=man:openvpn(8)
|
|
Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
|
|
Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO
|
|
|
|
[Service]
|
|
Type=notify
|
|
PrivateTmp=true
|
|
WorkingDirectory=/etc/openvpn/
|
|
ExecStart=/usr/sbin/openvpn --suppress-timestamps --config %i.conf
|
|
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
|
|
LimitNPROC=10
|
|
DeviceAllow=/dev/null rw
|
|
DeviceAllow=/dev/net/tun rw
|
|
ProtectSystem=true
|
|
ProtectHome=true
|
|
KillMode=process
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|