github.com/Ilhicas/nomad@v1.0.4-0.20210304152020-e86851182bc3/e2e/terraform/packer/ubuntu-bionic-amd64/vault.service (about)

     1  [Unit]
     2  Description="HashiCorp Vault - A tool for managing secrets"
     3  Documentation=https://www.vaultproject.io/docs/
     4  Requires=network-online.target
     5  After=network-online.target
     6  ConditionFileNotEmpty=/etc/vault.d/vault.hcl
     7  StartLimitIntervalSec=60
     8  StartLimitBurst=3
     9  
    10  [Service]
    11  User=vault
    12  Group=vault
    13  ProtectSystem=full
    14  ProtectHome=read-only
    15  PrivateTmp=yes
    16  PrivateDevices=yes
    17  SecureBits=keep-caps
    18  AmbientCapabilities=CAP_IPC_LOCK
    19  Capabilities=CAP_IPC_LOCK+ep
    20  CapabilityBoundingSet=CAP_SYSLOG CAP_IPC_LOCK
    21  NoNewPrivileges=yes
    22  ExecStart=/usr/local/bin/vault server -config=/etc/vault.d/vault.hcl
    23  ExecReload=/bin/kill --signal HUP $MAINPID
    24  KillMode=process
    25  KillSignal=SIGINT
    26  Restart=on-failure
    27  RestartSec=5
    28  TimeoutStopSec=30
    29  LimitNOFILE=65536
    30  LimitMEMLOCK=infinity
    31  
    32  [Install]
    33  WantedBy=multi-user.target