diff --git a/HowtoRedis.md b/HowtoRedis.md index b9ee7bce..95b8d72b 100644 --- a/HowtoRedis.md +++ b/HowtoRedis.md @@ -182,18 +182,36 @@ Description=Advanced key-value store After=network.target [Service] -ExecStartPre=/bin/mkdir -m 0755 -p /run/redis/%i -ExecStartPre=/bin/chown redis-%i: /run/redis/%i -PermissionsStartOnly=yes - Type=forking -PIDFile=/run/redis/%i/redis.pid -ExecStart=/usr/bin/redis-server /etc/redis/redis-%i.conf --unixsocket /run/redis/%i/redis.sock --pidfile /run/redis/%i/redis.pid -ExecStop=/usr/bin/redis-cli -s /run/redis/%i/redis.sock shutdown +ExecStart=/usr/bin/redis-server /etc/redis-%i/redis.conf +PIDFile=/var/run/redis-%i/redis-server.pid +TimeoutStopSec=0 Restart=always User=redis-%i Group=redis-%i +RuntimeDirectory=redis-%i +ExecStartPre=-/bin/run-parts --verbose /etc/redis-%i/redis-server.pre-up.d +ExecStartPost=-/bin/run-parts --verbose /etc/redis-%i/redis-server.post-up.d +ExecStop=-/bin/run-parts --verbose /etc/redis-%i/redis-server.pre-down.d +ExecStop=/bin/kill -s TERM $MAINPID +ExecStopPost=-/bin/run-parts --verbose /etc/redis-%i/redis-server.post-down.d + +UMask=007 +PrivateTmp=yes +LimitNOFILE=65535 +PrivateDevices=yes +ProtectHome=yes +ReadOnlyDirectories=/ +ReadWriteDirectories=-/var/lib/redis-%i +ReadWriteDirectories=-/var/log/redis-%i +ReadWriteDirectories=-/var/run/redis-%i +CapabilityBoundingSet=~CAP_SYS_PTRACE + +# redis-server writes its own config file when in cluster mode so we allow +# writing there (NB. ProtectSystem=true over ProtectSystem=full) +ProtectSystem=true +ReadWriteDirectories=-/etc/redis-%i [Install] WantedBy=multi-user.target ~~~ @@ -335,7 +353,9 @@ Un seul ensemble de processus Sentinel peut surveiller un ou plusieurs ensemble ### Unité systemd -Créer l’unité systemd suivant dans `/etc/systemd/system/redis-sentinel.service` : +Le paquet `redis-sentinel` de Debian 9 et plus fourni une unité systemd. + +Pou des versions précédentes, on peut créer l’unité systemd suivante dans `/etc/systemd/system/redis-sentinel.service` : ~~~ [Unit]