Jamil 34ab093dbc security(gateway): Don't run systemd gateways as root (#2943) ...

Docker-based gateways won't have working IPv6 (good point @AndrewDryga),
so I started testing the systemd gateways more and found some issues I
fixed.

* Update default tab order for Deploy gateways page to prefer systemd
* Update unit file to run gateway as unprivileged user
* Remove dependency on `wget` in unit file
* Fix iptables logic so rules as re-created on reboot
* Use `/var/lib/firezone` instead of `/etc/firezone` for writing runtime
files (`/etc/` is often mounted read-only on hardened systems)

---------

Signed-off-by: Jamil <jamilbk@users.noreply.github.com>
Co-authored-by: Andrew Dryga <andrew@dryga.com>

2023-12-21 18:29:10 +00:00

..

gateway-docker-upgrade.sh

security(gateway): Don't run systemd gateways as root (#2943)

2023-12-21 18:29:10 +00:00