diff options
author | Savyasachee Jha <genghizkhan91@hawkradius.com> | 2021-05-18 16:14:49 +0530 |
---|---|---|
committer | Savyasachee Jha <genghizkhan91@hawkradius.com> | 2021-05-18 16:14:49 +0530 |
commit | a36d1ec5ae0bc745f536ae7b97e013bb7cf956a5 (patch) | |
tree | 3c7fce98f319ca87cc18024ec88dc7a8a4aaa3aa /docs/systemd-with-workers/README.md | |
parent | Update changelog.d/9802.doc with a link to the actual issue (diff) | |
download | synapse-a36d1ec5ae0bc745f536ae7b97e013bb7cf956a5.tar.xz |
Removed duplicate file for hardening systemd workers and updated the docs as requested in code review
Diffstat (limited to '')
-rw-r--r-- | docs/systemd-with-workers/README.md | 12 |
1 files changed, 4 insertions, 8 deletions
diff --git a/docs/systemd-with-workers/README.md b/docs/systemd-with-workers/README.md index 074e1ead57..19ac1a3306 100644 --- a/docs/systemd-with-workers/README.md +++ b/docs/systemd-with-workers/README.md @@ -74,8 +74,8 @@ systemctl restart matrix-synapse.target `/etc/systemd/system/matrix-synapse.service.d/override-hardened.conf` (the directory may have to be created). It enables certain sandboxing features in systemd to further secure the synapse service. You may read the comments to -understand what the override file is doing. A similar override file at -`contrib/systemd-with-workers/override-hardened-worker.conf` may be copied to +understand what the override file is doing. The same file at may also be copied +to `/etc/systemd/system/matrix-synapse-worker@.service.d/override-hardened-worker.conf` (this directory may also have to be created) in order to apply the same hardening options to any worker processes. @@ -88,12 +88,8 @@ specified locations. ```sh systemctl daemon-reload -# Restart the master -systemctl restart matrix-synapse.service - -# If using a worker-based setup, restart the workers too. -# To restart a specific worker (eg. federation_reader): -systemctl restart matrix-synapse-worker@federation_reader.service +# Restart the services +systemctl restart matrix-synapse.target ``` In order to see their effect, you may run `systemd-analyze security |