systemd: Remove read-only flag on volume

* The read-only flag will create issues with those trying to add
  certificates to the data volume.
This commit is contained in:
Kyle Manna 2017-01-17 07:27:21 -08:00
parent b07b4957f8
commit 1129eb09bc

View File

@ -27,7 +27,7 @@
# 5. Verify service start-up with: # 5. Verify service start-up with:
# `systemctl status docker-openvpn@NAME.service` # `systemctl status docker-openvpn@NAME.service`
# `journalctl --unit docker-openvpn@NAME.service` # `journalctl --unit docker-openvpn@NAME.service`
# #
# For more information, see the systemd manual pages. # For more information, see the systemd manual pages.
# #
[Unit] [Unit]
@ -64,7 +64,7 @@ ExecStartPre=-/usr/bin/docker pull $IMG
ExecStartPre=/bin/sh -c 'test -z "$IP6_PREFIX" && exit 0; sysctl net.ipv6.conf.all.forwarding=1' ExecStartPre=/bin/sh -c 'test -z "$IP6_PREFIX" && exit 0; sysctl net.ipv6.conf.all.forwarding=1'
# Main process # Main process
ExecStart=/usr/bin/docker run --rm --privileged -v ${DATA_VOL}:/etc/openvpn:ro --name ${NAME} -p ${PORT} ${IMG} ovpn_run $ARGS ExecStart=/usr/bin/docker run --rm --privileged -v ${DATA_VOL}:/etc/openvpn --name ${NAME} -p ${PORT} ${IMG} ovpn_run $ARGS
# IPv6: Add static route for IPv6 after it starts up # IPv6: Add static route for IPv6 after it starts up
ExecStartPost=/bin/sh -c 'test -z "${IP6_PREFIX}" && exit 0; sleep 1; ip route replace ${IP6_PREFIX} via $(docker inspect -f "{{ .NetworkSettings.GlobalIPv6Address }}" $NAME ) dev docker0' ExecStartPost=/bin/sh -c 'test -z "${IP6_PREFIX}" && exit 0; sleep 1; ip route replace ${IP6_PREFIX} via $(docker inspect -f "{{ .NetworkSettings.GlobalIPv6Address }}" $NAME ) dev docker0'