From e136d3edbdb6749d4559939dc9fcbc11d166e34c Mon Sep 17 00:00:00 2001 From: Guilhem Moulin Date: Wed, 31 May 2017 17:39:57 +0200 Subject: =?UTF-8?q?/lib/systemd/system=20=E2=86=92=20/etc/systemd/system?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../files/etc/systemd/system/bacula-sd.service | 24 ++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 roles/bacula-sd/files/etc/systemd/system/bacula-sd.service (limited to 'roles/bacula-sd/files/etc/systemd/system/bacula-sd.service') diff --git a/roles/bacula-sd/files/etc/systemd/system/bacula-sd.service b/roles/bacula-sd/files/etc/systemd/system/bacula-sd.service new file mode 100644 index 0000000..698ad17 --- /dev/null +++ b/roles/bacula-sd/files/etc/systemd/system/bacula-sd.service @@ -0,0 +1,24 @@ +[Unit] +Description=Bacula Storage Daemon service +After=network.target + +[Service] +Type=forking +PIDFile=/var/run/bacula/bacula-sd.9103.pid +StandardOutput=syslog +User=bacula +Group=tape +ExecStart=/usr/sbin/bacula-sd -c /etc/bacula/bacula-sd.conf + +# Hardening +NoNewPrivileges=yes +PrivateDevices=yes +ProtectHome=yes +ProtectSystem=full +ReadOnlyDirectories=/ +ReadWriteDirectories=-/var/lib/bacula +ReadWriteDirectories=-/var/run/bacula +ReadWriteDirectories=/mnt/backup/bacula + +[Install] +WantedBy=multi-user.target -- cgit v1.2.3