Annotation of embedaddon/rsync/packaging/systemd/rsync.service, revision 1.1.1.2
1.1 misho 1: [Unit]
2: Description=fast remote file copy program daemon
3: ConditionPathExists=/etc/rsyncd.conf
1.1.1.2 ! misho 4: After=network.target
! 5: Documentation=man:rsync(1) man:rsyncd.conf(5)
1.1 misho 6:
7: [Service]
8: ExecStart=/usr/bin/rsync --daemon --no-detach
1.1.1.2 ! misho 9: RestartSec=1
! 10:
! 11: # Citing README.md:
! 12: #
! 13: # [...] Using ssh is recommended for its security features.
! 14: #
! 15: # Alternatively, rsync can run in `daemon' mode, listening on a socket.
! 16: # This is generally used for public file distribution, [...]
! 17: #
! 18: # So let's assume some extra security is more than welcome here. We do full
! 19: # system protection (which makes /usr, /boot, & /etc read-only) and hide
! 20: # devices. To override these defaults, it's best to do so in the drop-in
! 21: # directory, often done via `systemctl edit rsync.service`. The file needs
! 22: # just the bare minimum of the right [heading] and override values.
! 23: # See systemd.unit(5) and search for "drop-in" for full details.
! 24:
! 25: ProtectSystem=full
! 26: #ProtectHome=on|off|read-only
! 27: PrivateDevices=on
! 28: NoNewPrivileges=on
1.1 misho 29:
30: [Install]
31: WantedBy=multi-user.target
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>