Hello

On 03/21/2017 09:02 PM, Alberto Gonzalez Iniesta wrote:
> upstream's openvpn-server@.service unit is in fact included in
> Debian's package.

this one
https://github.com/OpenVPN/openvpn/blob/master/distro/systemd/openvpn-server%40.service.in
is included?

For me it is different:

# diff lib/systemd/system/openvpn@.service
etc/systemd/system/my-openvpn@server.service
2,5c2,4
< Description=OpenVPN connection to %i
< PartOf=openvpn.service
< ReloadPropagatedFrom=openvpn.service
< Before=systemd-user-sessions.service
---
> Description=OpenVPN service for %I
> After=syslog.target network-online.target
> Wants=network-online.target
7c6
< Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage
---
> Documentation=https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
10a10
> Type=notify
12,19c12,14
< KillMode=mixed
< Type=forking
< ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status
/run/openvpn/%i.status 10 --cd /etc/openvpn --config
/etc/openvpn/%i.conf --writepid /run/openvpn/%i.pid
< PIDFile=/run/openvpn/%i.pid
< ExecReload=/bin/kill -HUP $MAINPID
< WorkingDirectory=/etc/openvpn
< ProtectSystem=yes
< CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE
CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_READ_SEARCH
CAP_AUDIT_WRITE
---
> WorkingDirectory=/etc/openvpn/server
> ExecStart=/usr/sbin/openvpn --status %t/openvpn-server/status-%i.log
--status-version 2 --suppress-timestamps --config %i.conf
> CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE
CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE
22a18,19
> ProtectSystem=true
> ProtectHome=true
26,27d22
<
<

Bye

Reply via email to