specify config dir, simplify systemd unit

Author: jaxxstorm

derper.service

@@ -6,19 +6,12 @@ After=network.target
 Type=simple
 User=derper
 Group=derper
-ExecStart=/usr/bin/derper
+ExecStart=/usr/bin/derper -c /etc/derper/derper.conf
 Restart=on-failure
 RestartSec=5
 LimitNOFILE=1048576
 
 # Hardening measures
-PrivateTmp=yes
-ProtectSystem=full
-NoNewPrivileges=yes
-ProtectHome=yes
-ProtectKernelTunables=yes
-ProtectKernelModules=yes
-ProtectControlGroups=yes
 AmbientCapabilities=CAP_NET_BIND_SERVICE
 CapabilityBoundingSet=CAP_NET_BIND_SERVICE
 

scripts/preinstall.sh

@@ -2,4 +2,7 @@
 getent group xdpderper >/dev/null || groupadd -r xdpderper
 getent passwd xdpderper >/dev/null || useradd -r -g xdpderper -s /bin/bash -c "XDPDERP server" xdpderper
 getent group derper >/dev/null || groupadd -r derper
-getent passwd derper >/dev/null || useradd -r -g derper -s /bin/bash -c "DERP server" derper
+getent passwd derper >/dev/null || useradd -r -g derper -s /bin/bash -c "DERP server" derper
+
+mkdir /etc/derper
+chown -R derper:derper /etc/derper