File nginx_exporter.service.patch of Package prometheus-nginx_exporter

Overview Repositories Revisions Requests Users Attributes Meta

File nginx_exporter.service.patch of Package prometheus-nginx_exporter

--- a/examples/systemd/nginx_exporter.service	2024-04-15 05:21:58.142119957 +0200
+++ b/examples/systemd/nginx_exporter.service	2024-04-15 05:38:20.808076528 +0200
@@ -1,10 +1,44 @@
 [Unit]
-Description=NGINX Prometheus Exporter
-Requires=nginx_exporter.socket
+Description=Prometheus NGINX Exporter
+Requires=prometheus-nginx_exporter.socket
 
 [Service]
 User=nginx_exporter
-ExecStart=/usr/local/bin/nginx-prometheus-exporter --nginx.scrape-uri="http://127.0.0.1:8080/stub_status" --web.systemd-socket
+Group=nginx_exporter
+
+ExecStart=/usr/bin/nginx_exporter $ARGS
+EnvironmentFile=/etc/sysconfig/prometheus-nginx_exporter
+
+Restart=on-failure
+RestartSec=1
+StartLimitBurst=3
+
+AmbientCapabilities=
+CapabilityBoundingSet=
+KeyringMode=private
+LockPersonality=yes
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+MountFlags=private
+NoNewPrivileges=yes
+PrivateDevices=yes
+PrivateTmp=yes
+PrivateUsers=yes
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHome=yes
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=strict
+RemoveIPC=yes
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallFilter=@basic-io @file-system @io-event @ipc @network-io @process @signal ioctl madvise setrlimit uname
 
 [Install]
 WantedBy=multi-user.target

Places

File nginx_exporter.service.patch of Package prometheus-nginx_exporter

Places