holgersson-overlay/net-vpn/headscale/files/headscale.service

[Unit]
Description=headscale controller
After=syslog.target
After=network.target

[Service]
Type=simple
User=headscale
Group=headscale
ExecStart=/usr/bin/headscale serve
Restart=always
RestartSec=5

# Optional security enhancements
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/var/lib/headscale /run/headscale
AmbientCapabilities=CAP_NET_BIND_SERVICE
RuntimeDirectory=headscale

[Install]
WantedBy=multi-user.target
net-vpn/headscale: Import and bump to 0.23.0 This ebuild is based on net-vpn/headscale-0.22.3::gentoo. Changes to the ebuild beside the bump itself: - src_compile: Switch to ego - src_compile: strip away debug informations (-s -w) - src_compile: Disable cgo, link statically - pkg_postinstall: change style from early-return to if-then-fi - pkg_postinstall: drop custom compression from mentioned example file - pkg_postinstall: update the old 0.19.x ewarn from 2022-Feb to a new 0.23.0 ewarn - SRC_URI: change style from dict to appended string (shorter here) - add archiving and compression instructions for future maintenance and for improved reproducability - fix copyright line (first submission was in 2022, see commit 5aa57d09a9ad9c907b69afc2c9cc340663980c18) Signed-off-by: Nils Freydank <nils.freydank@posteo.de> 2024-10-27 21:48:26 +01:00			`[Unit]`
			`Description=headscale controller`
			`After=syslog.target`
			`After=network.target`

			`[Service]`
			`Type=simple`
			`User=headscale`
			`Group=headscale`
			`ExecStart=/usr/bin/headscale serve`
			`Restart=always`
			`RestartSec=5`

			`# Optional security enhancements`
			`NoNewPrivileges=yes`
			`PrivateTmp=yes`
			`ProtectSystem=strict`
			`ProtectHome=yes`
			`ReadWritePaths=/var/lib/headscale /run/headscale`
			`AmbientCapabilities=CAP_NET_BIND_SERVICE`
			`RuntimeDirectory=headscale`

			`[Install]`
			`WantedBy=multi-user.target`