2026-10-12 09:53:13 -07:00
|
|
|
[Unit]
|
|
|
|
|
Description="Threshold (fork of HashiCorp Boundary CE) - Identity-based access management for dynamic infrastructure"
|
|
|
|
|
Documentation=https://repo.anhonesthost.net/CyberCoveLLC/threshold
|
|
|
|
|
StartLimitIntervalSec=60
|
|
|
|
|
StartLimitBurst=3
|
|
|
|
|
|
|
|
|
|
[Service]
|
2026-10-12 11:12:29 -07:00
|
|
|
# Legacy HashiCorp Boundary environment file (BOUNDARY_* variables are still
|
|
|
|
|
# honored). Read first so that threshold.env takes precedence.
|
|
|
|
|
EnvironmentFile=-/etc/boundary.d/boundary.env
|
2026-10-12 09:53:13 -07:00
|
|
|
EnvironmentFile=-/etc/threshold.d/threshold.env
|
|
|
|
|
User=threshold
|
|
|
|
|
Group=threshold
|
|
|
|
|
ProtectSystem=full
|
|
|
|
|
ProtectHome=read-only
|
|
|
|
|
ExecStart=/usr/bin/threshold server -config=/etc/threshold.d/threshold.hcl
|
|
|
|
|
ExecReload=/bin/kill --signal HUP $MAINPID
|
|
|
|
|
KillMode=process
|
|
|
|
|
KillSignal=SIGINT
|
|
|
|
|
Restart=on-failure
|
|
|
|
|
RestartSec=5
|
|
|
|
|
TimeoutStopSec=30
|
|
|
|
|
LimitMEMLOCK=infinity
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
