curben
/
blog
mirror of https://gitlab.com/curben/blog
1
0
Fork 0
Code Issues Releases Wiki Activity

post(caddy): systemd start-rate-limit in 21.03 

- https://github.com/NixOS/nixpkgs/pull/97512
This commit is contained in:
MDLeom 2020-11-08 00:17:26 +00:00
parent 3fd090b561
commit 99ac6b142f
No known key found for this signature in database
GPG Key ID: 32D3E28E96A695E8
4 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
source/_posts/caddy-nixos-part-3.md
View File

@ -101,6 +101,7 @@ in {
environment = mkIf (versionAtLeast config.system.stateVersion "17.09") environment = mkIf (versionAtLeast config.system.stateVersion "17.09")
{ CADDYPATH = cfg.dataDir; }; { CADDYPATH = cfg.dataDir; };
startLimitIntervalSec = 86400; startLimitIntervalSec = 86400;
# 21.03+
# https://github.com/NixOS/nixpkgs/pull/97512 # https://github.com/NixOS/nixpkgs/pull/97512
# startLimitBurst = 5; # startLimitBurst = 5;
serviceConfig = { serviceConfig = {
@ -112,7 +113,7 @@ in {
User = "caddyProxy"; User = "caddyProxy";
Group = "caddyProxy"; Group = "caddyProxy";
Restart = "on-failure"; Restart = "on-failure";
# <= 20.03 # <= 20.09
StartLimitBurst = 5; StartLimitBurst = 5;
NoNewPrivileges = true; NoNewPrivileges = true;
LimitNPROC = 64; LimitNPROC = 64;

3
source/_posts/caddy-v2-nixos.md
View File

@ -80,6 +80,7 @@ in {
environment = mkIf (versionAtLeast config.system.stateVersion "17.09" && !isCaddy2) environment = mkIf (versionAtLeast config.system.stateVersion "17.09" && !isCaddy2)
{ CADDYPATH = cfg.dataDir; }; { CADDYPATH = cfg.dataDir; };
startLimitIntervalSec = 86400; startLimitIntervalSec = 86400;
# 21.03+
# https://github.com/NixOS/nixpkgs/pull/97512 # https://github.com/NixOS/nixpkgs/pull/97512
# startLimitBurst = 5; # startLimitBurst = 5;
serviceConfig = { serviceConfig = {
@ -91,7 +92,7 @@ in {
User = "caddyProxy"; User = "caddyProxy";
Group = "caddyProxy"; Group = "caddyProxy";
Restart = "on-failure"; Restart = "on-failure";
# <= 20.03 # <= 20.09
StartLimitBurst = 5; StartLimitBurst = 5;
NoNewPrivileges = true; NoNewPrivileges = true;
LimitNPROC = 64; LimitNPROC = 64;

3
source/_posts/i2p-eepsite-nixos.md
View File

@ -149,6 +149,7 @@ in {
environment = mkIf (versionAtLeast config.system.stateVersion "17.09") environment = mkIf (versionAtLeast config.system.stateVersion "17.09")
{ CADDYPATH = cfg.dataDir; }; { CADDYPATH = cfg.dataDir; };
startLimitIntervalSec = 86400; startLimitIntervalSec = 86400;
# 21.03+
# https://github.com/NixOS/nixpkgs/pull/97512 # https://github.com/NixOS/nixpkgs/pull/97512
# startLimitBurst = 5; # startLimitBurst = 5;
serviceConfig = { serviceConfig = {
@ -160,7 +161,7 @@ in {
User = "caddyProxy"; User = "caddyProxy";
Group = "caddyProxy"; Group = "caddyProxy";
Restart = "on-failure"; Restart = "on-failure";
# <= 20.03 # <= 20.09
StartLimitBurst = 5; StartLimitBurst = 5;
NoNewPrivileges = true; NoNewPrivileges = true;
LimitNPROC = 64; LimitNPROC = 64;

3
source/_posts/tor-hidden-onion-nixos.md
View File

@ -124,6 +124,7 @@ in {
environment = mkIf (versionAtLeast config.system.stateVersion "17.09") environment = mkIf (versionAtLeast config.system.stateVersion "17.09")
{ CADDYPATH = cfg.dataDir; }; { CADDYPATH = cfg.dataDir; };
startLimitIntervalSec = 86400; startLimitIntervalSec = 86400;
# 21.03+
# https://github.com/NixOS/nixpkgs/pull/97512 # https://github.com/NixOS/nixpkgs/pull/97512
# startLimitBurst = 5; # startLimitBurst = 5;
serviceConfig = { serviceConfig = {
@ -135,7 +136,7 @@ in {
User = "caddyProxy"; User = "caddyProxy";
Group = "caddyProxy"; Group = "caddyProxy";
Restart = "on-failure"; Restart = "on-failure";
# <= 20.03 # <= 20.09
StartLimitBurst = 5; StartLimitBurst = 5;
NoNewPrivileges = true; NoNewPrivileges = true;
LimitNPROC = 64; LimitNPROC = 64;