···

       
31
       
31
       
 
       
        udp-port = 443

     

       
32
       
32
       
 
       
        run-as-user = nobody

     

       
33
       
33
       
 
       
        run-as-group = nogroup

     

       
34
       
34
       
-
       
        socket-file = /var/run/ocserv-socket

     

       
34
       
34
       
+
       
        socket-file = /run/ocserv-socket

     

       
35
       
35
       
 
       
        server-cert = certs/server-cert.pem

     

       
36
       
36
       
 
       
        server-key = certs/server-key.pem

     

       
37
       
37
       
 
       
        keepalive = 32400

     
···

       
50
       
50
       
 
       
        rekey-time = 172800

     

       
51
       
51
       
 
       
        rekey-method = ssl

     

       
52
       
52
       
 
       
        use-occtl = true

     

       
53
       
53
       
-
       
        pid-file = /var/run/ocserv.pid

     

       
53
       
53
       
+
       
        pid-file = /run/ocserv.pid

     

       
54
       
54
       
 
       
        device = vpns

     

       
55
       
55
       
 
       
        predictable-ips = true

     

       
56
       
56
       
 
       
        default-domain = example.com

     
···

       
90
       
90
       
 
       


     

       
91
       
91
       
 
       
      serviceConfig = {

     

       
92
       
92
       
 
       
        PrivateTmp = true;

     

       
93
       
93
       
-
       
        PIDFile = "/var/run/ocserv.pid";

     

       
94
       
94
       
-
       
        ExecStart = "${pkgs.ocserv}/bin/ocserv --foreground --pid-file /var/run/ocesrv.pid --config /etc/ocserv/ocserv.conf";

     

       
93
       
93
       
+
       
        PIDFile = "/run/ocserv.pid";

     

       
94
       
94
       
+
       
        ExecStart = "${pkgs.ocserv}/bin/ocserv --foreground --pid-file /run/ocesrv.pid --config /etc/ocserv/ocserv.conf";

     

       
95
       
95
       
 
       
        ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";

     

       
96
       
96
       
 
       
      };

     

       
97
       
97
       
 
       
    };