This unit is provided by:
Options
-
[Service]
-
Environment=RUNTIME_DIRECTORY=/run/cockpit/tls
-
ExecStart=/usr/lib/cockpit/cockpit-tls
-
ExecStart=/usr/libexec/cockpit-tls
-
ExecStartPre=+/usr/lib/cockpit/cockpit-certificate-ensure --for-cockpit-tls
-
ExecStartPre=+/usr/libexec/cockpit-certificate-ensure --for-cockpit-tls
-
Group=cockpit-ws
-
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateTmp=yes
-
ProtectHome
Introduced in systemd 214=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=strict -
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-
RuntimeDirectory=cockpit/tls
-
User=cockpit-ws
-
-
[Unit]
-
After=cockpit-wsinstance-http.socket cockpit-wsinstance-https-factory.socket
-
Description=Cockpit Web Service
-
Documentation=man:cockpit-ws(8)
-
Requires=cockpit.socket cockpit-wsinstance-http.socket cockpit-wsinstance-https-factory.socket
-
Additionnal notes
Nothing here.