service file fix

3 files changed, 3 insertions, 5 deletions

diff --git a/TODO.md b/TODO.md
index b797c71..10e4c90 100644
--- a/TODO.md
+++ b/TODO.md
@@ -19,8 +19,6 @@
   user
 * garbage collect old f2b entries
 * f2b ddos prevention, sleep on too many bans?
-* Chroot and User in Systemd Unit
-* Security Hardening in Systemd Unit
 
 ## ACME / Auto Cert Manager
 * acme dir with key/cert is exposed inside chroot dir
diff --git a/service/systemd/wfm.service b/service/systemd/wfm.service
index 854b2ba..e3e7046 100644
--- a/service/systemd/wfm.service
+++ b/service/systemd/wfm.service
@@ -5,9 +5,9 @@ After=network.target
 [Service]
 User=root
 ExecStart=/usr/local/sbin/wfm \
-    -addr=:80
+    -addr=:80 \
 	-chroot=/datadir \
-	-setuid=myuser 
+	-setuid=myuser
 Restart=on-failure
 SuccessExitStatus=3 4
 RestartForceExitStatus=3 4
diff --git a/wfm.go b/wfm.go
index fadc477..1c81711 100644
--- a/wfm.go
+++ b/wfm.go
@@ -40,7 +40,7 @@ var (
 	acmBind    = flag.String("acm_addr", "", "autocert manager listen address, eg: :80")
 	acmWhlist  multiString // this flag set in main
 	f2bEnabled = flag.Bool("f2b", true, "ban ip addresses on user/pass failures")
-	f2bDump    = flag.String("f2b_dump", "", "enable f2b dump at this prefix, eg. /f2bdump")
+	f2bDump    = flag.String("f2b_dump", "", "enable f2b dump at this prefix, eg. /f2bdump (default no)")
 
 	favIcn = genFavIcon()
 )