27 lines
970 B
Desktop File
27 lines
970 B
Desktop File
[Unit]
|
|
Description=The Apache HTTP Server
|
|
After=network.target remote-fs.target nss-lookup.target
|
|
|
|
[Service]
|
|
EnvironmentFile=/etc/conf.d/apache2
|
|
ExecStart=/usr/sbin/apache2 $APACHE2_OPTS -DFOREGROUND
|
|
ExecReload=/usr/sbin/apache2 $APACHE2_OPTS -k graceful
|
|
ExecStop=/usr/sbin/apache2 $APACHE2_OPTS -k graceful-stop
|
|
# We want systemd to give httpd some time to finish gracefully, but still want
|
|
# it to kill httpd after TimeoutStopSec if something went wrong during the
|
|
# graceful stop. Normally, Systemd sends SIGTERM signal right after the
|
|
# ExecStop, which would kill httpd. We are sending useless SIGCONT here to give
|
|
# httpd time to finish.
|
|
KillSignal=SIGCONT
|
|
PrivateTmp=true
|
|
#Hardening
|
|
PrivateTmp=true
|
|
CapabilityBoundingSet=CAP_CHOWN CAP_SETGID CAP_SETUID CAP_DAC_OVERRIDE CAP_KILL CAP_NET_BIND_SERVICE CAP_IPC_LOCK
|
|
SecureBits=noroot-locked
|
|
ProtectSystem=full
|
|
NoNewPrivileges=true
|
|
PrivateDevices=true
|
|
MemoryDenyWriteExecute=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|