feat: add NetBox plugin store
This commit is contained in:
@@ -0,0 +1,29 @@
|
||||
[Unit]
|
||||
Description=Privileged NetBox Store host agent
|
||||
Requires=netbox-store-agent.socket
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
Group=root
|
||||
ExecStart=/usr/local/bin/netbox-store-agent --config /etc/netbox-store-agent/agent.toml daemon
|
||||
StateDirectory=netbox-store-agent
|
||||
StateDirectoryMode=0700
|
||||
RuntimeDirectory=netbox-store-agent
|
||||
RuntimeDirectoryMode=0750
|
||||
UMask=0077
|
||||
NoNewPrivileges=true
|
||||
PrivateTmp=true
|
||||
ProtectHome=true
|
||||
ProtectSystem=strict
|
||||
ReadWritePaths=/opt/netbox /var/lib/netbox-store-agent /run/netbox-store-agent /run/lock
|
||||
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
|
||||
LockPersonality=true
|
||||
SystemCallArchitectures=native
|
||||
Restart=on-failure
|
||||
RestartSec=5s
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -0,0 +1,14 @@
|
||||
[Unit]
|
||||
Description=NetBox Store host-agent socket
|
||||
|
||||
[Socket]
|
||||
ListenStream=/run/netbox-store-agent/agent.sock
|
||||
SocketMode=0660
|
||||
SocketUser=root
|
||||
# Replace with the group of the NetBox service.
|
||||
SocketGroup=netbox
|
||||
DirectoryMode=0750
|
||||
RemoveOnStop=true
|
||||
|
||||
[Install]
|
||||
WantedBy=sockets.target
|
||||
Reference in New Issue
Block a user