add nginx, sshd, ssl roles

2026-09-20 22:14:56 +00:00
parent ba9e1a664f
commit c640406c10
131 changed files with 1535 additions and 780 deletions
@@ -6,12 +6,16 @@ Wants=network-online.target

 [Service]
 Type=simple
-User=root
+User=xray-core
+Group=xray-core
 WorkingDirectory=/opt/xray-core
 ExecStart=/opt/xray-core/xray -confdir /opt/xray-core/config
 Restart=on-failure
 RestartSec=3s
 LimitNOFILE=65535
+AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_ADMIN
+NoNewPrivileges=true

 [Install]
 WantedBy=multi-user.target