123456789101112131415161718192021222324252627 |
- [Unit]
- Description=Mumble-web
- [Service]
- SyslogIdentifier=mumble-web
- ExecStart=/usr/bin/python2.7 /usr/bin/python2-websockify \
- {% if mumble_web_ssl_activated %}
- --cert={{ murmur_sslcert }} --key={{ murmur_sslkey }} --ssl-only \
- {% endif %}
- {% if mumble_web_ssl_target %}
- --ssl-target \
- {% endif %}
- --web={{ mumble_web_path }}/dist {{ mumble_web_listen }} localhost:{{ murmur_port }}
- DynamicUser=true
- ; we need access to the certs
- {% if mumble_web_supplementary_groups is defined %}
- SupplementaryGroups={{ mumble_web_supplementary_groups }}
- {% endif %}
- ; The following additional security directives only work with systemd v229 or later.
- AmbientCapabilities=CAP_NET_BIND_SERVICE
- CapabilityBoundingSet=CAP_NET_BIND_SERVICE
- NoNewPrivileges=true
- ; Always run
- Restart=always
- [Install]
- WantedBy=multi-user.target
|