2026-01-07 14:27:55 +03:00
|
|
|
[Unit]
|
2026-02-04 12:29:56 +03:00
|
|
|
Description=WAF ({{ caddy_my_name }}) (built with BYOW: Build Your Own WAF)
|
2026-01-07 14:27:55 +03:00
|
|
|
After=network.target network-online.target
|
2026-02-12 14:37:42 +01:00
|
|
|
Requires=network-online.target{% if caddy_consul %} consul.service{% endif %}
|
2026-01-07 14:27:55 +03:00
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
Type=notify
|
2026-01-20 12:27:03 +03:00
|
|
|
User={{ caddy_system_user }}
|
|
|
|
|
Group={{ caddy_system_group }}
|
2026-02-04 12:29:56 +03:00
|
|
|
ExecStart={{ caddy_binary }} run --environ --config {{ caddy_config_dir }}/Caddyfile
|
|
|
|
|
ExecReload={{ caddy_binary }} reload --config {{ caddy_config_dir }}/Caddyfile --force
|
2026-01-07 14:27:55 +03:00
|
|
|
TimeoutStopSec=15s
|
|
|
|
|
LimitNOFILE=1048576
|
|
|
|
|
PrivateTmp=true
|
|
|
|
|
ProtectSystem=full
|
|
|
|
|
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
|
2026-02-03 15:36:35 +03:00
|
|
|
StandardOutput=journal
|
|
|
|
|
StandardError=journal
|
|
|
|
|
SyslogIdentifier={{ caddy_my_name }}
|
2026-02-12 14:37:42 +01:00
|
|
|
{% if caddy_consul %}
|
|
|
|
|
Environment="CONSUL_CLIENT_CERT={{ caddy_consul_client_cert }}" "CONSUL_CLIENT_KEY={{ caddy_consul_client_key }}"
|
|
|
|
|
{% endif %}
|
2026-01-07 14:27:55 +03:00
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
