| Marc-Antoine Perennou | f825580 | 2013-02-13 09:28:50 +0100 | [diff] [blame] | 1 | [Unit] |
| 2 | Description=HAProxy Load Balancer |
| 3 | After=network.target |
| 4 | |
| 5 | [Service] |
| Apollon Oikonomopoulos | b060148 | 2019-05-06 13:00:52 +0200 | [diff] [blame] | 6 | EnvironmentFile=-/etc/default/haproxy |
| Tim Duesterhus | eaa4b8a | 2019-05-06 13:00:53 +0200 | [diff] [blame^] | 7 | Environment="CONFIG=/etc/haproxy/haproxy.cfg" "PIDFILE=/run/haproxy.pid" "EXTRAOPTS=-S /run/haproxy-master.sock" |
| Apollon Oikonomopoulos | b060148 | 2019-05-06 13:00:52 +0200 | [diff] [blame] | 8 | ExecStartPre=@SBINDIR@/haproxy -f $CONFIG -c -q $EXTRAOPTS |
| 9 | ExecStart=@SBINDIR@/haproxy -Ws -f $CONFIG -p $PIDFILE $EXTRAOPTS |
| 10 | ExecReload=@SBINDIR@/haproxy -f $CONFIG -c -q $EXTRAOPTS |
| Marc-Antoine Perennou | f825580 | 2013-02-13 09:28:50 +0100 | [diff] [blame] | 11 | ExecReload=/bin/kill -USR2 $MAINPID |
| Apollon Oikonomopoulos | 74f0169 | 2014-10-08 15:14:41 +0300 | [diff] [blame] | 12 | KillMode=mixed |
| Marc-Antoine Perennou | f825580 | 2013-02-13 09:28:50 +0100 | [diff] [blame] | 13 | Restart=always |
| Vincent Bernat | 3b479bd | 2018-06-22 20:57:03 +0200 | [diff] [blame] | 14 | SuccessExitStatus=143 |
| Tim Duesterhus | d6942c8 | 2017-11-20 15:58:35 +0100 | [diff] [blame] | 15 | Type=notify |
| Marc-Antoine Perennou | f825580 | 2013-02-13 09:28:50 +0100 | [diff] [blame] | 16 | |
| Tim Duesterhus | 1ce8de2 | 2018-02-27 20:19:03 +0100 | [diff] [blame] | 17 | # The following lines leverage SystemD's sandboxing options to provide |
| 18 | # defense in depth protection at the expense of restricting some flexibility |
| 19 | # in your setup (e.g. placement of your configuration files) or possibly |
| 20 | # reduced performance. See systemd.service(5) and systemd.exec(5) for further |
| 21 | # information. |
| 22 | |
| Tim Duesterhus | 8a96592 | 2018-02-27 20:19:04 +0100 | [diff] [blame] | 23 | # NoNewPrivileges=true |
| 24 | # ProtectHome=true |
| 25 | # If you want to use 'ProtectSystem=strict' you should whitelist the PIDFILE, |
| 26 | # any state files and any other files written using 'ReadWritePaths' or |
| 27 | # 'RuntimeDirectory'. |
| 28 | # ProtectSystem=true |
| 29 | # ProtectKernelTunables=true |
| 30 | # ProtectKernelModules=true |
| 31 | # ProtectControlGroups=true |
| Tim Duesterhus | 2788a39 | 2018-02-27 20:19:05 +0100 | [diff] [blame] | 32 | # If your SystemD version supports them, you can add: @reboot, @swap, @sync |
| 33 | # SystemCallFilter=~@cpu-emulation @keyring @module @obsolete @raw-io |
| Tim Duesterhus | 8a96592 | 2018-02-27 20:19:04 +0100 | [diff] [blame] | 34 | |
| Marc-Antoine Perennou | f825580 | 2013-02-13 09:28:50 +0100 | [diff] [blame] | 35 | [Install] |
| 36 | WantedBy=multi-user.target |