Created
February 25, 2019 04:14
-
-
Save paul-chambers/999a89048220ec3ec07551e3c848fbb4 to your computer and use it in GitHub Desktop.
If you're not running traefik using docker, you might want a systemd service file for it.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# | |
# assumes you have a user called 'traefik', with the home directory '/var/lib/traefik', | |
# containing the 'traefik' executable and a 'trafik.toml' configuration file. | |
## adduser --system --shell /sbin/nologin --home /var/lib/traefik traefik | |
# | |
[Unit] | |
Description=Traefik | |
Documentation=https://docs.traefik.io | |
After=network-online.target | |
#AssertFileIsExecutable=/var/lib/traefik | |
#AssertPathExists=/var/lib/traefik.toml | |
[Service] | |
User=traefik | |
Group=nogroup | |
Umask=077 | |
AmbientCapabilities=CAP_NET_BIND_SERVICE | |
# configure service behavior | |
Type=notify | |
WorkingDirectory=/var/lib/traefik | |
ExecStart=/var/lib/traefik/traefik --configFile=/var/lib/traefik.toml | |
Restart=always | |
WatchdogSec=1s | |
# lock down system access | |
# prohibit any operating system and configuration modification | |
#ProtectSystem=strict | |
# create separate, new (and empty) /tmp and /var/tmp filesystems | |
#PrivateTmp=true | |
# make /home directories inaccessible | |
#ProtectHome=true | |
# turns off access to physical devices (/dev/...) | |
#PrivateDevices=true | |
# make kernel settings (procfs and sysfs) read-only | |
#ProtectKernelTunables=true | |
# make cgroups /sys/fs/cgroup read-only | |
#ProtectControlGroups=true | |
# allow writing of acme.json | |
#ReadWritePaths=/etc/traefik/acme.json | |
# depending on log and entrypoint configuration, you may need to allow writing to other paths, too | |
# limit number of processes in this unit | |
#LimitNPROC=1 | |
[Install] | |
WantedBy=multi-user.target |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment