| 123456789101112131415161718192021222324252627282930313233343536373839 |
- [Unit]
- Description=Atlas Probe
- After=network-online.target syslog.target
- [Service]
- RemoveIPC=yes
- CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW
- {% if ripe_atlas.allow is defined %}
- IPAddressAllow={% set comma = joiner(" ") %}{% for host in ripe_atlas.allow %}{{ comma() }}{{ host }}{% endfor %}
- {% endif %}
- IPAddressDeny=172.20.0.0/14 172.31.0.0/16 10.0.0.0/8 fd00::/8 172.24.0.0/16 2001:db8:dead:beef::/64 100.64.0.0/10 fd7a:115c:a1e0::/96 {% if ripe_atlas.deny is defined %}{% for host in ripe_atlas.deny %} {{ host }}{% endfor %}{% endif %}
- PrivateTmp=yes
- DeviceAllow=
- PrivateMounts=true
- ProtectControlGroups=true
- ProtectProc=noaccess
- ProtectSystem=true
- ProtectHome=read-only
- PermissionsStartOnly=true
- LimitNOFILE=1048576
- LimitNPROC=512
- UMask=600
- User=ripe-atlas
- Group=ripe-atlas
- Environment=HOME=/var/spool/ripe-atlas
- WorkingDirectory=/var/spool/ripe-atlas
- ExecStart=/usr/sbin/ripe-atlas
- ExecStop=/usr/bin/killall -n 0 telnetd perd eperd eooqd
- Restart=always
- TimeoutStopSec=60
- [Install]
- WantedBy=multi-user.target
|
