squid unprivilleged

This commit is contained in:
Jean-François GUILLAUME 2025-06-13 14:04:29 +02:00
parent c834cb020f
commit 7aa62b7df8

View file

@ -89,6 +89,15 @@
(capabilities "cap_net_admin,cap_net_bind_service,cap_net_raw,cap_syslog,cap_bpf=+ep"))))
(define squid-service-type
(service-type
(name 'squid)
(extensions (list
(service-extension shepherd-root-service-type squid-shepherd-service)
(service-extension account-service-type (const %squid-accounts))
(service-extension activation-service-type (const %squid-activation))))
(description "Run @uref{http://www.squid-cache.org/, squid} community developped Squid software.")))
(define squid-privileged-service-type
(service-type
(name 'squid)
(extensions (list