Айнур Карпиев
0a903feb12
Some checks are pending
Check for merge conflicts / main (push) Waiting to run
CodeQL / Analyze (pull_request) Waiting to run
Test Supported Distributions / smoke-tests (pull_request) Waiting to run
Test Supported Distributions / distro-test (alpine_3_21) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (alpine_3_22) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (alpine_3_23) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (centos_10) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (centos_9) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (debian_11) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (debian_12) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (debian_13) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (fedora_40) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (fedora_41) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (fedora_42) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (fedora_43) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (ubuntu_20) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (ubuntu_22) (pull_request) Blocked by required conditions
Test Supported Distributions / distro-test (ubuntu_24) (pull_request) Blocked by required conditions
Check for merge conflicts / main (pull_request_target) Waiting to run
42 lines
1.4 KiB
Plaintext
42 lines
1.4 KiB
Plaintext
[Unit]
|
|
Description=Pi-hole FTL
|
|
# This unit is supposed to indicate when network functionality is available, but it is only
|
|
# very weakly defined what that is supposed to mean, with one exception: at shutdown, a unit
|
|
# that is ordered after network-online.target will be stopped before the network
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
# A target that should be used as synchronization point for all host/network name service lookups.
|
|
# All services for which the availability of full host/network name resolution is essential should
|
|
# be ordered after this target, but not pull it in.
|
|
Wants=nss-lookup.target
|
|
Before=nss-lookup.target
|
|
|
|
# Limit (re)start loop to 5 within 1 minute
|
|
StartLimitBurst=5
|
|
StartLimitIntervalSec=60s
|
|
|
|
[Service]
|
|
User=pihole
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_NET_ADMIN CAP_SYS_NICE CAP_IPC_LOCK CAP_CHOWN CAP_SYS_TIME
|
|
|
|
# Run prestart with elevated permissions
|
|
ExecStartPre=+/opt/pihole/pihole-FTL-prestart.sh
|
|
ExecStart=/usr/bin/pihole-FTL -f
|
|
Restart=on-failure
|
|
RestartSec=5s
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
ExecStopPost=+/opt/pihole/pihole-FTL-poststop.sh
|
|
|
|
# Use graceful shutdown with a reasonable timeout
|
|
TimeoutStopSec=120s
|
|
|
|
# Make /usr, /boot, /etc and possibly some more folders read-only...
|
|
ProtectSystem=full
|
|
# ... except /etc/pihole
|
|
# This merely retains r/w access rights, it does not add any new.
|
|
# Must still be writable on the host!
|
|
ReadWriteDirectories=/etc/pihole
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|