Modify systemd service file
Better support to run miniflux with Let's Encrypt, without a reverse proxy.
This commit is contained in:
parent
9a6c80f562
commit
94eaf0e254
1 changed files with 8 additions and 0 deletions
|
@ -43,5 +43,13 @@ RestrictRealtime=true
|
||||||
# https://www.freedesktop.org/software/systemd/man/systemd.exec.html#ReadWritePaths=
|
# https://www.freedesktop.org/software/systemd/man/systemd.exec.html#ReadWritePaths=
|
||||||
ReadWritePaths=/run
|
ReadWritePaths=/run
|
||||||
|
|
||||||
|
# Allow miniflux to bind to <1024 ports
|
||||||
|
# https://www.freedesktop.org/software/systemd/man/systemd.exec.html#AmbientCapabilities=
|
||||||
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||||||
|
|
||||||
|
# Provide a private /tmp for CERT_CACHE (required when using Let's Encrypt)
|
||||||
|
# https://www.freedesktop.org/software/systemd/man/systemd.exec.html#PrivateTmp=
|
||||||
|
PrivateTmp=true
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
|
|
Loading…
Reference in a new issue