From 93b45e62eef254eae68bc119b9770e97bae2c9fa Mon Sep 17 00:00:00 2001 From: Christian Grothoff Date: Sun, 17 Jul 2022 17:03:14 +0200 Subject: add taler-exchange.slice for taler-exchange wide options (#7209) --- debian/taler-exchange.taler-exchange-aggregator.service | 1 + debian/taler-exchange.taler-exchange-aggregator@.service | 16 ++++++++++++++++ debian/taler-exchange.taler-exchange-closer.service | 1 + debian/taler-exchange.taler-exchange-expire.service | 1 + debian/taler-exchange.taler-exchange-httpd.service | 1 + debian/taler-exchange.taler-exchange-httpd@.service | 1 + debian/taler-exchange.taler-exchange-secmod-cs.service | 2 ++ .../taler-exchange.taler-exchange-secmod-eddsa.service | 3 +++ debian/taler-exchange.taler-exchange-secmod-rsa.service | 2 ++ debian/taler-exchange.taler-exchange-transfer.service | 1 + debian/taler-exchange.taler-exchange-wirewatch.service | 1 + debian/taler-exchange.taler-exchange-wirewatch@.service | 1 + debian/taler-exchange.taler-exchange.slice | 7 +++++++ 13 files changed, 38 insertions(+) create mode 100644 debian/taler-exchange.taler-exchange-aggregator@.service create mode 100644 debian/taler-exchange.taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-aggregator.service b/debian/taler-exchange.taler-exchange-aggregator.service index 683c1a81e..aa4f32e38 100644 --- a/debian/taler-exchange.taler-exchange-aggregator.service +++ b/debian/taler-exchange.taler-exchange-aggregator.service @@ -13,3 +13,4 @@ StandardError=journal PrivateTmp=yes PrivateDevices=yes ProtectSystem=full +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-aggregator@.service b/debian/taler-exchange.taler-exchange-aggregator@.service new file mode 100644 index 000000000..aa4f32e38 --- /dev/null +++ b/debian/taler-exchange.taler-exchange-aggregator@.service @@ -0,0 +1,16 @@ +[Unit] +Description=GNU Taler payment system exchange aggregator service +PartOf=taler-exchange.target + +[Service] +User=taler-exchange-aggregator +Type=simple +Restart=always +RestartSec=100ms +ExecStart=/usr/bin/taler-exchange-aggregator -c /etc/taler/taler.conf +StandardOutput=journal +StandardError=journal +PrivateTmp=yes +PrivateDevices=yes +ProtectSystem=full +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-closer.service b/debian/taler-exchange.taler-exchange-closer.service index 01c52b2d4..d3a654cc7 100644 --- a/debian/taler-exchange.taler-exchange-closer.service +++ b/debian/taler-exchange.taler-exchange-closer.service @@ -13,3 +13,4 @@ StandardError=journal PrivateTmp=yes PrivateDevices=yes ProtectSystem=full +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-expire.service b/debian/taler-exchange.taler-exchange-expire.service index f44829c5e..e4432f231 100644 --- a/debian/taler-exchange.taler-exchange-expire.service +++ b/debian/taler-exchange.taler-exchange-expire.service @@ -13,3 +13,4 @@ StandardError=journal PrivateTmp=yes PrivateDevices=yes ProtectSystem=full +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-httpd.service b/debian/taler-exchange.taler-exchange-httpd.service index 68bde0d66..98d76f6fb 100644 --- a/debian/taler-exchange.taler-exchange-httpd.service +++ b/debian/taler-exchange.taler-exchange-httpd.service @@ -19,6 +19,7 @@ StandardError=journal PrivateTmp=no PrivateDevices=yes ProtectSystem=full +Slice=taler-exchange.slice [Install] WantedBy=multi-user.target diff --git a/debian/taler-exchange.taler-exchange-httpd@.service b/debian/taler-exchange.taler-exchange-httpd@.service index 4235f72e9..e0246899c 100644 --- a/debian/taler-exchange.taler-exchange-httpd@.service +++ b/debian/taler-exchange.taler-exchange-httpd@.service @@ -21,6 +21,7 @@ StandardError=journal PrivateTmp=no PrivateDevices=yes ProtectSystem=full +Slice=taler-exchange.slice [Install] WantedBy=multi-user.target diff --git a/debian/taler-exchange.taler-exchange-secmod-cs.service b/debian/taler-exchange.taler-exchange-secmod-cs.service index 15b87a3c9..3b5e0745d 100644 --- a/debian/taler-exchange.taler-exchange-secmod-cs.service +++ b/debian/taler-exchange.taler-exchange-secmod-cs.service @@ -14,3 +14,5 @@ StandardError=journal PrivateTmp=no PrivateDevices=yes ProtectSystem=full +IPAddressDeny=any +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-secmod-eddsa.service b/debian/taler-exchange.taler-exchange-secmod-eddsa.service index e4898581c..e8fba1736 100644 --- a/debian/taler-exchange.taler-exchange-secmod-eddsa.service +++ b/debian/taler-exchange.taler-exchange-secmod-eddsa.service @@ -14,3 +14,6 @@ StandardError=journal PrivateTmp=no PrivateDevices=yes ProtectSystem=full +IPAddressDeny=any +Slice=taler-exchange.slice + diff --git a/debian/taler-exchange.taler-exchange-secmod-rsa.service b/debian/taler-exchange.taler-exchange-secmod-rsa.service index 6c5a3d613..10a9585a7 100644 --- a/debian/taler-exchange.taler-exchange-secmod-rsa.service +++ b/debian/taler-exchange.taler-exchange-secmod-rsa.service @@ -14,3 +14,5 @@ StandardError=journal PrivateTmp=no PrivateDevices=yes ProtectSystem=full +IPAddressDeny=any +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-transfer.service b/debian/taler-exchange.taler-exchange-transfer.service index b2615b7c9..c7187b30e 100644 --- a/debian/taler-exchange.taler-exchange-transfer.service +++ b/debian/taler-exchange.taler-exchange-transfer.service @@ -14,3 +14,4 @@ StandardError=journal PrivateTmp=yes PrivateDevices=yes ProtectSystem=full +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-wirewatch.service b/debian/taler-exchange.taler-exchange-wirewatch.service index 54704cb80..e49472143 100644 --- a/debian/taler-exchange.taler-exchange-wirewatch.service +++ b/debian/taler-exchange.taler-exchange-wirewatch.service @@ -14,3 +14,4 @@ StandardError=journal PrivateTmp=yes PrivateDevices=yes ProtectSystem=full +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange-wirewatch@.service b/debian/taler-exchange.taler-exchange-wirewatch@.service index 54704cb80..e49472143 100644 --- a/debian/taler-exchange.taler-exchange-wirewatch@.service +++ b/debian/taler-exchange.taler-exchange-wirewatch@.service @@ -14,3 +14,4 @@ StandardError=journal PrivateTmp=yes PrivateDevices=yes ProtectSystem=full +Slice=taler-exchange.slice diff --git a/debian/taler-exchange.taler-exchange.slice b/debian/taler-exchange.taler-exchange.slice new file mode 100644 index 000000000..b5bb71e2e --- /dev/null +++ b/debian/taler-exchange.taler-exchange.slice @@ -0,0 +1,7 @@ +[Unit] +Description=Slice for GNU taler exchange processes +Before=slices.target + +[Slice] +# Add settings that should affect all GNU Taler exchange +# components here. -- cgit v1.2.3