Return to rsync@.service CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / rsync / packaging / systemd

Annotation of embedaddon/rsync/packaging/systemd/rsync@.service, revision 1.1.1.1

1.1       misho       1: [Unit]
                      2: Description=fast remote file copy program daemon
                      3: After=network.target
                      4: 
                      5: [Service]
                      6: ExecStart=-/usr/bin/rsync --daemon
                      7: StandardInput=socket
                      8: StandardOutput=inherit
                      9: StandardError=journal
                     10: 
                     11: # Citing README.md:
                     12: #
                     13: #   [...] Using ssh is recommended for its security features.
                     14: #
                     15: #   Alternatively, rsync can run in `daemon' mode, listening on a socket.
                     16: #   This is generally used for public file distribution, [...]
                     17: #
                     18: # So let's assume some extra security is more than welcome here. We do full
                     19: # system protection (which makes /usr, /boot, & /etc read-only) and hide
                     20: # devices. To override these defaults, it's best to do so in the drop-in
                     21: # directory, often done via `systemctl edit rsync@.service`. The file needs
                     22: # just the bare minimum of the right [heading] and override values.
                     23: # See systemd.unit(5) and search for "drop-in" for full details.
                     24: 
                     25: ProtectSystem=full
                     26: #ProtectHome=on|off|read-only
                     27: PrivateDevices=on
                     28: NoNewPrivileges=on