Jan Dittberner
f6089bac79
- create user cacert-goocsp in postinst script - use CAP_NET_BIND_SERVICE in systemd unit to allow binding to priviledged ports - change config file path to /etc/goocsp/config.yaml
13 lines
347 B
Desktop File
13 lines
347 B
Desktop File
[Unit]
|
|
Description=CAcert OCSP responder service
|
|
After=network.target
|
|
|
|
[Service]
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
ExecCondition=/bin/sh -c 'test -f /etc/goocsp/config.yaml'
|
|
ExecStart=/usr/bin/cacert-goocsp -serverAddr ":80" -configFile /etc/goocsp/config.yaml
|
|
StateDirectory=goocsp
|
|
User=cacert-goocsp
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|