diff --git a/release/config/systemd/v2ray.service b/release/config/systemd/v2ray.service index c8dcbfd2f..cc9c394b1 100644 --- a/release/config/systemd/v2ray.service +++ b/release/config/systemd/v2ray.service @@ -1,25 +1,22 @@ [Unit] -Description=V2Ray - A unified platform for anti-censorship -Documentation=https://v2ray.com https://guide.v2fly.org +Description=V2Ray Service +Documentation=https://www.v2ray.com/ https://www.v2fly.org/ After=network.target nss-lookup.target -Wants=network-online.target [Service] # If the version of systemd is 240 or above, then uncommenting Type=exec and commenting out Type=simple #Type=exec Type=simple -# Runs as root or add CAP_NET_BIND_SERVICE ability can bind 1 to 1024 port. # This service runs as root. You may consider to run it as another user for security concerns. -# By uncommenting User=v2ray and commenting out User=root, the service will run as user v2ray. +# By uncommenting User=nobody and commenting out User=root, the service will run as user nobody. # More discussion at https://github.com/v2ray/v2ray-core/issues/1011 User=root -#User=v2ray -CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW -NoNewPrivileges=yes +#User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true ExecStart=/usr/bin/v2ray/v2ray -config /etc/v2ray/config.json Restart=on-failure -# Don't restart in the case of configuration error -RestartPreventExitStatus=23 [Install] WantedBy=multi-user.target diff --git a/release/config/systemd/v2ray@.service b/release/config/systemd/v2ray@.service index 22c2440e2..557bb095a 100644 --- a/release/config/systemd/v2ray@.service +++ b/release/config/systemd/v2ray@.service @@ -1,26 +1,22 @@ [Unit] -Description=V2Ray - A unified platform for anti-censorship - Profile -> %i -Documentation=https://v2ray.com https://guide.v2fly.org +Description=V2Ray Service +Documentation=https://www.v2ray.com/ https://www.v2fly.org/ After=network.target nss-lookup.target -Wants=network-online.target [Service] # If the version of systemd is 240 or above, then uncommenting Type=exec and commenting out Type=simple #Type=exec Type=simple -# Runs as root or add CAP_NET_BIND_SERVICE ability can bind 1 to 1024 port. # This service runs as root. You may consider to run it as another user for security concerns. -# By uncommenting User=v2ray and commenting out User=root, the service will run as user v2ray. +# By uncommenting User=nobody and commenting out User=root, the service will run as user nobody. # More discussion at https://github.com/v2ray/v2ray-core/issues/1011 User=root -#User=v2ray -CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW -NoNewPrivileges=yes +#User=nobody +CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE +NoNewPrivileges=true ExecStart=/usr/bin/v2ray/v2ray -config /etc/v2ray/%i.json Restart=on-failure -# Don't restart in the case of configuration error -RestartPreventExitStatus=23 [Install] -DefaultInstance=default WantedBy=multi-user.target