28 lines
781 B
Bash
28 lines
781 B
Bash
|
groupadd --system caddy && useradd --system --gid caddy --create-home --home-dir /var/lib/caddy --shell /usr/sbin/nologin --comment "Caddy web server" caddy
|
||
|
|
|
||
|
|
cat > /etc/systemd/system/naiveCaddy.service <<EOF
|
||
|
|
[Unit]
|
||
|
|
Description=Caddy with Naive
|
||
|
|
Documentation=https://caddyserver.com/docs/
|
||
|
|
After=network.target network-online.target
|
||
|
|
Requires=network-online.target
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
User=caddy
|
||
|
|
Group=caddy
|
||
|
|
ExecStart=/usr/bin/caddy run --environ --config /etc/caddy/Caddyfile
|
||
|
|
ExecReload=/usr/bin/caddy reload --config /etc/caddy/Caddyfile
|
||
|
|
TimeoutStopSec=5s
|
||
|
|
LimitNOFILE=1048576
|
||
|
|
LimitNPROC=512
|
||
|
|
PrivateTmp=true
|
||
|
|
ProtectSystem=full
|
||
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|
||
|
|
EOF
|
||
|
|
|
||
|
|
systemctl daemon-reload
|
||
|
|
systemctl enable --now naiveCaddy
|
||
|
|
ss -tulpn | grep caddy
|