On 03/21/2017 10:16 PM, Alberto Gonzalez Iniesta wrote: > On Tue, Mar 21, 2017 at 09:27:28PM +0100, Daniel Schröter wrote: >> this one >> https://github.com/OpenVPN/openvpn/blob/master/distro/systemd/openvpn-server%40.service.in >> is included? >> >> For me it is different: >> > > $ dpkg -L openvpn | grep openvpn-server
(Sorry for my long response time.) Yes I know this file. I enable openvpn via systemd template. My config is (and has not the best name) under: /etc/openvpn/server.conf So I enable it via: systemctl enable openvpn@server If I also enable the one form github via: systemctl enable my-openvpn@server And now diff those two files (see attachment because of the long lines) they are different. I'm not a systemd expert. Maybe I understand something wrong..... Any ideas? Thanks in advanced! Bye
[Unit] [Unit] Description=OpenVPN connection to %i | Description=OpenVPN service for %I PartOf=openvpn.service | After=syslog.target network-online.target ReloadPropagatedFrom=openvpn.service | Wants=network-online.target Before=systemd-user-sessions.service < Documentation=man:openvpn(8) Documentation=man:openvpn(8) Documentation=https://community.openvpn.net/openvpn/wiki/Open | Documentation=https://community.openvpn.net/openvpn/wiki/Open Documentation=https://community.openvpn.net/openvpn/wiki/HOWT Documentation=https://community.openvpn.net/openvpn/wiki/HOWT [Service] [Service] > Type=notify PrivateTmp=true PrivateTmp=true KillMode=mixed | WorkingDirectory=/etc/openvpn/server Type=forking | ExecStart=/usr/sbin/openvpn --status %t/openvpn-server/status ExecStart=/usr/sbin/openvpn --daemon ovpn-%i --status /run/op | CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND PIDFile=/run/openvpn/%i.pid < ExecReload=/bin/kill -HUP $MAINPID < WorkingDirectory=/etc/openvpn < ProtectSystem=yes < CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND < LimitNPROC=10 LimitNPROC=10 DeviceAllow=/dev/null rw DeviceAllow=/dev/null rw DeviceAllow=/dev/net/tun rw DeviceAllow=/dev/net/tun rw > ProtectSystem=true > ProtectHome=true [Install] [Install] WantedBy=multi-user.target WantedBy=multi-user.target < <
