Codex Agent
27 lines
743 B
Desktop File
27 lines
743 B
Desktop File
[Unit]
|
|
Description=Caddy (HWLAB Keycloak public HTTPS reverse proxy)
|
|
Documentation=https://caddyserver.com/docs/
|
|
After=network-online.target
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=root
|
|
ExecStart=/usr/local/bin/caddy run --environ --config /etc/caddy/Caddyfile --adapter caddyfile
|
|
ExecReload=/usr/local/bin/caddy reload --config /etc/caddy/Caddyfile --adapter caddyfile
|
|
TimeoutStopSec=5s
|
|
LimitNOFILE=1048576
|
|
PrivateDevices=yes
|
|
PrivateTmp=yes
|
|
ProtectSystem=full
|
|
ProtectHome=read-only
|
|
ReadWritePaths=/var/lib/caddy /var/log/caddy /root/.local/share/caddy
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
|
|
NoNewPrivileges=yes
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|