-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathsshguard-docker.service
More file actions
33 lines (26 loc) · 909 Bytes
/
sshguard-docker.service
File metadata and controls
33 lines (26 loc) · 909 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
[Unit]
Description=SSHGuard on docker
After=docker.service
Requires=docker.service
[Service]
TimeoutStartSec=0
Environment=IMAGE_NAME=drmurx/docker-systemd-sshguard:0.5.0
Environment=IPTABLE_BASE=INPUT
Environment=IPTABLE_BASE_POS=0
ExecStartPre=-/usr/bin/docker kill %p
ExecStartPre=-/usr/bin/docker rm %p
ExecStartPre=/usr/bin/docker pull $IMAGE_NAME
ExecStart=/usr/bin/docker run --name %p \
--rm \
--volume /var/log/journal:/app/journal \
--env IPTABLE_BASE=${IPTABLE_BASE} \
--env IPTABLE_BASE_POS=${IPTABLE_BASE_POS} \
--net=host \
--privileged \
${IMAGE_NAME}
ExecStop=-/usr/bin/docker stop %p
ExecStop=-/usr/bin/docker rm %p
[X-Fleet]
Global=true
[Install]
WantedBy=multi-user.target