sheppy/no-secrets-athq-ansible
1
0
Fork 0
mirror of https://github.com/FAUSheppy/no-secrets-athq-ansible synced 2025-12-10 08:48:33 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: slapd group & systemd

Browse Source
This commit is contained in:
Johnathen Sheppard
2023-01-15 08:31:53 +01:00
parent 6c8a690a39
commit 6c8718e948
7 changed files with 151 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
roles/usermanagement/templates/slapd-custom.service Normal file
View File

@@ -0,0 +1,29 @@
[Unit]
Description=Slapd Custom Service
[Service]
Type=forking
ExecStart=/usr/sbin/slapd -f /etc/ldap/slapd.conf -h "ldapi:/// ldap:///"
User=openldap
Group=openldap
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
Restart=on-failure
PrivateTmp=yes
ProtectSystem=full
ProtectHome=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
NoNewPrivileges=yes
MountFlags=private
SystemCallArchitectures=native
PrivateDevices=yes
[Install]
WantedBy=multi-user.target