diff options
author | D. Can Celasun | 2019-10-09 08:40:16 +0100 |
---|---|---|
committer | D. Can Celasun | 2019-10-09 08:40:16 +0100 |
commit | 2856331d26e0d5b33ededfff25b837ee6c3aec41 (patch) | |
tree | 2442c9313d82736aabc4918fb1db9ef7678ec088 /bitwarden_rs.service | |
download | aur-2856331d26e0d5b33ededfff25b837ee6c3aec41.tar.gz |
[bitwarden_rs-postgresql] New package
Diffstat (limited to 'bitwarden_rs.service')
-rw-r--r-- | bitwarden_rs.service | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/bitwarden_rs.service b/bitwarden_rs.service new file mode 100644 index 000000000000..458600a27ea6 --- /dev/null +++ b/bitwarden_rs.service @@ -0,0 +1,29 @@ +[Unit] +Description=Bitwarden Server (Rust Edition) +Documentation=https://github.com/dani-garcia/bitwarden_rs +After=network.target + +[Service] +# The user/group bitwarden_rs is run under. the working directory (see below) should allow write and read access to this user/group +User=bitwarden_rs +Group=bitwarden_rs +# The location of the .env file for configuration +EnvironmentFile=/etc/bitwarden_rs.env +# The location of the compiled binary +ExecStart=/usr/bin/bitwarden_rs +# Set reasonable connection and process limits +LimitNOFILE=1048576 +LimitNPROC=64 +# Isolate bitwarden_rs from the rest of the system +PrivateTmp=true +PrivateDevices=true +ProtectHome=true +ProtectSystem=strict +# Only allow writes to the following directory and set it to the working directory (user and password data are stored here) +WorkingDirectory=/var/lib/bitwarden_rs +ReadWriteDirectories=/var/lib/bitwarden_rs +# Allow bitwarden_rs to bind ports in the range of 0-1024 +AmbientCapabilities=CAP_NET_BIND_SERVICE + +[Install] +WantedBy=multi-user.target |