Update patchmon-install.sh (#18074)

Avoids systemd environment secret leaks via D-Bus/subprocesses.
This commit is contained in:
rhclayto
2026-10-24 11:27:28 -06:00
committed by GitHub
parent 063162a504
commit 658cb8683b

View File

@@ -107,7 +107,7 @@ ExecStart=/opt/patchmon/patchmon-server
Restart=always
RestartSec=10
Environment=PATH=/usr/bin:/usr/local/bin
EnvironmentFile=/opt/patchmon/.env
Environment=ENV_FILE=/opt/patchmon/.env
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict