From 6adcf00ea4cf58846492ded131ae1cefb15064e0 Mon Sep 17 00:00:00 2001
From: Dmitry Ilvokhin <d@ilvokhin.com>
Date: Sat, 21 Mar 2026 22:56:06 +0000
Subject: Use override for tor.service

---
 roles/tor/files/override.conf |  2 ++
 roles/tor/files/tor.service   | 29 -----------------------------
 2 files changed, 2 insertions(+), 29 deletions(-)
 create mode 100644 roles/tor/files/override.conf
 delete mode 100644 roles/tor/files/tor.service

(limited to 'roles/tor/files')

diff --git a/roles/tor/files/override.conf b/roles/tor/files/override.conf
new file mode 100644
index 0000000..00be00f
--- /dev/null
+++ b/roles/tor/files/override.conf
@@ -0,0 +1,2 @@
+[Unit]
+After=wg-quick@wgtor0.service
diff --git a/roles/tor/files/tor.service b/roles/tor/files/tor.service
deleted file mode 100644
index d41767b..0000000
--- a/roles/tor/files/tor.service
+++ /dev/null
@@ -1,29 +0,0 @@
-[Unit]
-Description=Anonymizing overlay network for TCP
-After=network.target nss-lookup.target wg-quick@wgtor0.service
-
-[Service]
-Type=notify
-NotifyAccess=all
-ExecStartPre=/usr/bin/tor -f /etc/tor/torrc --verify-config
-ExecStart=/usr/bin/tor -f /etc/tor/torrc
-ExecReload=/bin/kill -HUP ${MAINPID}
-KillSignal=SIGINT
-TimeoutSec=60
-Restart=on-failure
-WatchdogSec=1m
-LimitNOFILE=32768
-
-# Hardening
-PrivateTmp=yes
-PrivateDevices=yes
-ProtectHome=yes
-ProtectSystem=full
-ReadOnlyDirectories=/
-ReadWriteDirectories=-/var/lib/tor
-ReadWriteDirectories=-/var/log/tor
-NoNewPrivileges=yes
-CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE CAP_DAC_READ_SEARCH CAP_KILL
-
-[Install]
-WantedBy=multi-user.target
-- 
cgit v1.3