diff options
author | V3n3RiX <venerix@redcorelinux.org> | 2021-04-28 20:21:43 +0100 |
---|---|---|
committer | V3n3RiX <venerix@redcorelinux.org> | 2021-04-28 20:21:43 +0100 |
commit | 40aaaa64e86ba6710bbeb31c4615a6ce80e75e11 (patch) | |
tree | 758c221bad35c9288d0bd6df9c7dfc226728e52c /app-metrics/blackbox_exporter/files | |
parent | 8d5dbd847cbc704a6a06405856e94b461011afe3 (diff) |
gentoo resync : 28.04.2021
Diffstat (limited to 'app-metrics/blackbox_exporter/files')
-rw-r--r-- | app-metrics/blackbox_exporter/files/blackbox_exporter.service | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/app-metrics/blackbox_exporter/files/blackbox_exporter.service b/app-metrics/blackbox_exporter/files/blackbox_exporter.service new file mode 100644 index 000000000000..a29ee2b7c24a --- /dev/null +++ b/app-metrics/blackbox_exporter/files/blackbox_exporter.service @@ -0,0 +1,29 @@ +[Unit] +Description=Prometheus blackbox Exporter +After=network.target + +[Service] +User=blackbox_exporter +Group=blackbox_exporter +ExecStart=/usr/bin/blackbox_exporter --config.file="/etc/blackbox_exporter/blackbox.yml" +ExecReload=/bin/kill -HUP $MAINPID +DynamicUser=true + +NoNewPrivileges=true +ProtectSystem=full +ProtectKernelModules=true +ProtectKernelTunables=true +PrivateTmp=true +LockPersonality=true +ProtectHostname=true +ProtectHome=true +ProtectControlGroups=true +ProtectKernelLogs=true +PrivateDevices=true +RestrictRealtime=true +CapabilityBoundingSet= +MemoryDenyWriteExecute=true +CapabilityBoundingSet=CAP_NET_RAW +AmbientCapabilities=CAP_NET_RAW + +[Install] |