diff options
| author | Dmitry Ilvokhin <d@ilvokhin.com> | 2026-03-21 22:56:06 +0000 |
|---|---|---|
| committer | Dmitry Ilvokhin <d@ilvokhin.com> | 2026-03-21 22:56:06 +0000 |
| commit | 6adcf00ea4cf58846492ded131ae1cefb15064e0 (patch) | |
| tree | 6e3301e71b21825c3c1798787dfa1f692acd687a /roles/tor/files | |
| parent | 15a6ad3fdc4844dd9a47a2e0a6f467c7b57a828a (diff) | |
| download | infra-6adcf00ea4cf58846492ded131ae1cefb15064e0.tar.gz infra-6adcf00ea4cf58846492ded131ae1cefb15064e0.tar.bz2 infra-6adcf00ea4cf58846492ded131ae1cefb15064e0.zip | |
Use override for tor.service
Diffstat (limited to 'roles/tor/files')
| -rw-r--r-- | roles/tor/files/override.conf | 2 | ||||
| -rw-r--r-- | roles/tor/files/tor.service | 29 |
2 files changed, 2 insertions, 29 deletions
diff --git a/roles/tor/files/override.conf b/roles/tor/files/override.conf new file mode 100644 index 0000000..00be00f --- /dev/null +++ b/roles/tor/files/override.conf @@ -0,0 +1,2 @@ +[Unit] +After=wg-quick@wgtor0.service diff --git a/roles/tor/files/tor.service b/roles/tor/files/tor.service deleted file mode 100644 index d41767b..0000000 --- a/roles/tor/files/tor.service +++ /dev/null @@ -1,29 +0,0 @@ -[Unit] -Description=Anonymizing overlay network for TCP -After=network.target nss-lookup.target wg-quick@wgtor0.service - -[Service] -Type=notify -NotifyAccess=all -ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config -ExecStart=/usr/bin/tor -f /etc/tor/torrc -ExecReload=/bin/kill -HUP ${MAINPID} -KillSignal=SIGINT -TimeoutSec=60 -Restart=on-failure -WatchdogSec=1m -LimitNOFILE=32768 - -# Hardening -PrivateTmp=yes -PrivateDevices=yes -ProtectHome=yes -ProtectSystem=full -ReadOnlyDirectories=/ -ReadWriteDirectories=-/var/lib/tor -ReadWriteDirectories=-/var/log/tor -NoNewPrivileges=yes -CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH CAP_KILL - -[Install] -WantedBy=multi-user.target |