debian: rundir service

This commit is contained in:
Florian Dold 2021-07-26 23:37:13 +02:00
parent 7bc7ee58ee
commit 63590bb350
No known key found for this signature in database
GPG Key ID: D2E4F00F29D02A4B
5 changed files with 21 additions and 5 deletions

View File

@ -6,14 +6,15 @@
[PATHS]
# Move runtime data "tmp" directory to /var/lib/taler-exchange/
# to possibly provide additional protection from unwarranted access.
TALER_RUNTIME_DIR = /var/lib/taler-exchange/tmp/
TALER_RUNTIME_DIR = /run/taler-exchange-private
[exchange]
# Debian package is configured to use a reverse proxy with a UNIX
# domain socket. See nginx/apache configuration files.
#
# FIXME: This should be set to something like "NONE"
# since systemd creates the socket for us.
SERVE = UNIX
UNIXPATH = /var/lib/taler-exchange/exchange.sock

View File

@ -1,7 +1,6 @@
[Unit]
Description=GNU Taler payment system exchange REST API
AssertPathExists=/var/lib/taler-exchange/
Requires=taler-exchange-httpd.socket taler-exchange-secmod-rsa.service taler-exchange-secmod-eddsa.service
Requires=taler-exchange-rundir.service taler-exchange-httpd.socket taler-exchange-secmod-rsa.service taler-exchange-secmod-eddsa.service
Wants=taler-exchange-wirewatch.service taler-exchange-aggregator.service taler-exchange-transfer.service
After=postgres.service network.target

View File

@ -0,0 +1,14 @@
[Unit]
Description=Private runtime directory for the GNU Taler exchange
[Service]
# We just want to create the run directory
Type=oneshot
RuntimeDirectory=taler-exchange-private
User=root
Group=taler-exchange-private
ExecStart=/bin/true
RemainAfterExit=yes
[Install]
WantedBy=multi-user.target

View File

@ -1,5 +1,6 @@
[Unit]
Description=GNU Taler payment system exchange EdDSA security module
Requires=taler-exchange-rundir.service
[Service]
User=taler-exchange-secmod-eddsa

View File

@ -1,5 +1,6 @@
[Unit]
Description=GNU Taler payment system exchange RSA security module
Requires=taler-exchange-rundir.service
[Service]
User=taler-exchange-secmod-rsa