git.ipfire.org Git - thirdparty/haproxy.git/blob

1 [Unit]

2 Description=HAProxy Load Balancer

3 After=network-online.target

4 Wants=network-online.target

6 [Service]

7 EnvironmentFile=-/etc/default/haproxy

8 EnvironmentFile=-/etc/sysconfig/haproxy

9 Environment="CONFIG=/etc/haproxy/haproxy.cfg" "PIDFILE=/run/haproxy.pid" "EXTRAOPTS=-S /run/haproxy-master.sock"

10 ExecStart=@SBINDIR@/haproxy -Ws -f $CONFIG -p $PIDFILE $EXTRAOPTS

11 ExecReload=@SBINDIR@/haproxy -Ws -f $CONFIG -c $EXTRAOPTS

12 ExecReload=/bin/kill -USR2 $MAINPID

13 KillMode=mixed

14 Restart=always

15 SuccessExitStatus=143

16 Type=notify

18 # The following lines leverage SystemD's sandboxing options to provide

19 # defense in depth protection at the expense of restricting some flexibility

20 # in your setup (e.g. placement of your configuration files) or possibly

21 # reduced performance. See systemd.service(5) and systemd.exec(5) for further

22 # information.

24 # NoNewPrivileges=true

25 # ProtectHome=true

26 # If you want to use 'ProtectSystem=strict' you should whitelist the PIDFILE,

27 # any state files and any other files written using 'ReadWritePaths' or

28 # 'RuntimeDirectory'.

29 # ProtectSystem=true

30 # ProtectKernelTunables=true

31 # ProtectKernelModules=true

32 # ProtectControlGroups=true

33 # If your SystemD version supports them, you can add: @reboot, @swap, @sync

34 # SystemCallFilter=~@cpu-emulation @keyring @module @obsolete @raw-io

36 [Install]

37 WantedBy=multi-user.target