Created
May 31, 2019 03:29
-
-
Save jpcaparas/89d495716101abb78eb73bfb3feb57b8 to your computer and use it in GitHub Desktop.
OpenVPN client Fedora systemd service
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [Unit] | |
| Description=OpenVPN tunnel for %I | |
| After=syslog.target network-online.target | |
| Wants=network-online.target | |
| Documentation=man:openvpn(8) | |
| Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage | |
| Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO | |
| [Service] | |
| Type=notify | |
| PrivateTmp=true | |
| WorkingDirectory=/etc/openvpn/client | |
| ExecStart=/usr/sbin/openvpn --suppress-timestamps --nobind --config %i.conf | |
| CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE | |
| LimitNPROC=10 | |
| DeviceAllow=/dev/null rw | |
| DeviceAllow=/dev/net/tun rw | |
| ProtectSystem=true | |
| ProtectHome=true | |
| KillMode=process | |
| [Install] | |
| WantedBy=multi-user.target |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment