diff options
author | Sven-Hendrik Haase <svenstaro@gmail.com> | 2021-04-18 07:27:57 +0000 |
---|---|---|
committer | Sven-Hendrik Haase <svenstaro@gmail.com> | 2021-04-18 07:28:02 +0000 |
commit | 26395cd3595db1988fa64d7c8c0bc814c6631548 (patch) | |
tree | 4ec3eb4c576ac0f4f73d4926ca3688fd865de766 /README.md | |
parent | (cargo-release) start next development iteration 0.14.1-alpha.0 (diff) | |
download | miniserve-26395cd3595db1988fa64d7c8c0bc814c6631548.tar.gz miniserve-26395cd3595db1988fa64d7c8c0bc814c6631548.zip |
Add hardened systemd unit file
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 23 |
1 files changed, 23 insertions, 0 deletions
@@ -205,6 +205,29 @@ few examples with common paths are provided below: # For fish miniserve --print-completions fish > ~/.config/fish/completions/miniserve.fish +## systemd + +A hardened systemd-compatible unit file can be found in `packaging/miniserve@.service`. You could +install this to `/etc/systemd/system/miniserve@.service` and start and enable `miniserve` as a +daemon on a specific serve path `/my/serve/path` like this: + + systemctl enable --now miniserve@-my-serve-path + +Keep in mind that you'll have to use `systemd-escape` to properly escape a path for this usage. + +In case you want to customize the particular flags that miniserve launches with, you can use + + systemctl edit miniserve@-my-serve-path + +and set the `[Service]` part in the resulting `override.conf` file. For instance: + + [Service] + ExecStart=/usr/bin/miniserve --enable-tar --enable-zip --no-symlinks --verbose -i ::1 -p 1234 --title Saugeland --color-scheme monokai --color-scheme-dark monokai -- %I + +Make sure to leave the `%I` at the very end in place or the wrong path might be served. You +might additionally have to override `IPAddressAllow` and `IPAddressDeny` if you plan on making +miniserve directly available on a public interface. + ## Binding behavior For convenience reasons, miniserve will try to bind on all interfaces by default (if no `-i` is provided). |