prometheus-blackbox-exporter/trunk/prometheus-blackbox-exporter.service

   1 [Unit]
   2 Description=Prometheus blackbox Exporter
   3 After=network.target
   4
   5 [Service]
   6 EnvironmentFile=-/etc/conf.d/prometheus-blackbox-exporter
   7 ExecStart=/usr/bin/prometheus-blackbox-exporter $BLACKBOX_EXPORTER_ARGS
   8 ExecReload=/bin/kill -HUP $MAINPID
   9 DynamicUser=true
  10
  11 NoNewPrivileges=true
  12 ProtectSystem=full
  13 ProtectKernelModules=true
  14 ProtectKernelTunables=true
  15 PrivateTmp=true
  16 LockPersonality=true
  17 ProtectHostname=true
  18 ProtectHome=true
  19 ProtectControlGroups=true
  20 ProtectKernelLogs=true
  21 PrivateDevices=true
  22 RestrictRealtime=true
  23 CapabilityBoundingSet=
  24 MemoryDenyWriteExecute=true
  25 CapabilityBoundingSet=CAP_NET_RAW
  26 AmbientCapabilities=CAP_NET_RAW
  27
  28 [Install]
  29 WantedBy=multi-user.target