diff options
Diffstat (limited to 'app-metrics/blackbox_exporter/files/blackbox_exporter.service')
| -rw-r--r-- | app-metrics/blackbox_exporter/files/blackbox_exporter.service | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/app-metrics/blackbox_exporter/files/blackbox_exporter.service b/app-metrics/blackbox_exporter/files/blackbox_exporter.service new file mode 100644 index 000000000000..a29ee2b7c24a --- /dev/null +++ b/app-metrics/blackbox_exporter/files/blackbox_exporter.service @@ -0,0 +1,29 @@ +[Unit] +Description=Prometheus blackbox Exporter +After=network.target + +[Service] +User=blackbox_exporter +Group=blackbox_exporter +ExecStart=/usr/bin/blackbox_exporter --config.file="/etc/blackbox_exporter/blackbox.yml" +ExecReload=/bin/kill -HUP $MAINPID +DynamicUser=true + +NoNewPrivileges=true +ProtectSystem=full +ProtectKernelModules=true +ProtectKernelTunables=true +PrivateTmp=true +LockPersonality=true +ProtectHostname=true +ProtectHome=true +ProtectControlGroups=true +ProtectKernelLogs=true +PrivateDevices=true +RestrictRealtime=true +CapabilityBoundingSet= +MemoryDenyWriteExecute=true +CapabilityBoundingSet=CAP_NET_RAW +AmbientCapabilities=CAP_NET_RAW + +[Install] |