From f37e32870a213068ed398db5a012000fe1c3d8a6 Mon Sep 17 00:00:00 2001 From: Eric Wong Date: Tue, 16 Jan 2024 11:52:52 +0000 Subject: examples/unsubscribe-milter@.service: use KillMode=process This can be a multi-process daemon, but systemd should only kill the top-level one. And also finish a comment about the User having access to the shared private key. --- examples/unsubscribe-milter@.service | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/examples/unsubscribe-milter@.service b/examples/unsubscribe-milter@.service index eb5dcbe4..a68e6e81 100644 --- a/examples/unsubscribe-milter@.service +++ b/examples/unsubscribe-milter@.service @@ -24,7 +24,13 @@ Sockets = unsubscribe-milter.socket # the corresponding PSGI app needs permissions to modify the # mlmmj spool, so we might as well use the same user since +# they both need to read /home/mlmmj/.unsubscribe.key User = mlmmj +# only kill the parent process when using the default Sendmail::PMilter +# postfork dispatcher, children will die naturally when they're done +# with a given message. +KillMode = process + [Install] WantedBy = multi-user.target -- cgit v1.2.3-24-ge0c7