Skip to content

Commit fb8d992

Browse files
committed
Drop -f flag from systemd service to allow default-less startup
With -f, the config file is mandatory and the service enters a restart loop if it does not exist. Without -f, the default /etc/thinproxy.conf is silently ignored if missing, and the proxy starts with built-in defaults.
1 parent 7b2ee6d commit fb8d992

1 file changed

Lines changed: 1 addition & 2 deletions

File tree

thinproxy.service

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ After=network.target
44

55
[Service]
66
Type=simple
7-
ExecStart=/usr/local/bin/thinproxy -f /etc/thinproxy.conf
7+
ExecStart=/usr/local/bin/thinproxy
88
Restart=on-failure
99
RestartSec=5
1010

@@ -17,7 +17,6 @@ PrivateDevices=yes
1717
ProtectKernelTunables=yes
1818
ProtectKernelModules=yes
1919
ProtectControlGroups=yes
20-
ReadOnlyPaths=/etc/thinproxy.conf
2120
RestrictNamespaces=yes
2221
RestrictSUIDSGID=yes
2322
MemoryDenyWriteExecute=yes

0 commit comments

Comments
 (0)