summarylogtreecommitdiffstats
path: root/bitcoind-reindex.service
diff options
context:
space:
mode:
authormrxx2020-03-10 22:05:31 +0100
committermrxx2020-03-10 22:05:31 +0100
commit9c21589e4eda58c9eb35db5c966a14c908eac163 (patch)
treef9856d02c0fe9d06dd140c7d53c040ce0d9d8aa1 /bitcoind-reindex.service
parentb54edd50a6836880fc08b29932c6c4edc8b24d01 (diff)
downloadaur-9c21589e4eda58c9eb35db5c966a14c908eac163.tar.gz
Remove nproc from make; Update service units
Diffstat (limited to 'bitcoind-reindex.service')
-rw-r--r--bitcoind-reindex.service12
1 files changed, 10 insertions, 2 deletions
diff --git a/bitcoind-reindex.service b/bitcoind-reindex.service
index 6cc8c7708c96..5418f52da700 100644
--- a/bitcoind-reindex.service
+++ b/bitcoind-reindex.service
@@ -5,8 +5,9 @@
# See "man systemd.service" for details.
# Note that almost all daemon options could be specified in
-# /etc/bitcoin/bitcoin.conf, except for those explicitly specified as arguments
-# in ExecStart=
+# /etc/bitcoin/bitcoin.conf, but keep in mind those explicitly
+# specified as arguments in ExecStart= will override those in the
+# config file.
[Unit]
Description=Bitcoin daemon (reindex)
@@ -19,6 +20,10 @@ ExecStart=/usr/bin/bitcoind -daemon \
-reindex \
-datadir=/var/lib/bitcoind
+# Make sure the config directory is readable by the service user
+PermissionsStartOnly=true
+ExecStartPre=/bin/chgrp bitcoin /etc/bitcoin
+
# Process management
####################
@@ -54,6 +59,9 @@ PrivateTmp=true
# Mount /usr, /boot/ and /etc read-only for the process.
ProtectSystem=full
+# Deny access to /home, /root and /run/user
+ProtectHome=true
+
# Disallow the process and all of its children to gain
# new privileges through execve().
NoNewPrivileges=true