diff options
author | Xiretza | 2024-04-27 12:22:07 +0000 |
---|---|---|
committer | Xiretza | 2024-04-27 12:22:07 +0000 |
commit | a1deea76e1f7b587d74280b693ddb592a77781ca (patch) | |
tree | 5cf5524ef4d96c79115d23387dea232998268c58 /conduwuit.service | |
parent | a48d056357602c63be572b74d998826518ec7dea (diff) | |
download | aur-a1deea76e1f7b587d74280b693ddb592a77781ca.tar.gz |
Fix and update package according to Rust package guidelines
The config file has moved from /etc/matrix-conduit/conduit.toml to
/etc/conduwuit/conduwuit.toml.
Diffstat (limited to 'conduwuit.service')
-rw-r--r-- | conduwuit.service | 60 |
1 files changed, 60 insertions, 0 deletions
diff --git a/conduwuit.service b/conduwuit.service new file mode 100644 index 000000000000..edde1a7ce51f --- /dev/null +++ b/conduwuit.service @@ -0,0 +1,60 @@ +[Unit] +Description=conduwuit Matrix homeserver +After=network-online.target + +[Service] +DynamicUser=yes +User=_conduwuit +Group=_conduwuit +Type=notify + +AmbientCapabilities= +CapabilityBoundingSet= + +DevicePolicy=closed +LockPersonality=yes +MemoryDenyWriteExecute=yes +NoNewPrivileges=yes +ProcSubset=pid +ProtectClock=yes +ProtectControlGroups=yes +ProtectHome=yes +ProtectHostname=yes +ProtectKernelLogs=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +ProtectProc=invisible +ProtectSystem=strict +PrivateDevices=yes +PrivateMounts=yes +PrivateTmp=yes +PrivateUsers=yes +PrivateIPC=yes +RemoveIPC=yes +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +RestrictNamespaces=yes +RestrictRealtime=yes +RestrictSUIDSGID=yes +SystemCallArchitectures=native +SystemCallFilter=@system-service @resources +SystemCallFilter=~@clock @debug @module @mount @reboot @swap @cpu-emulation @obsolete @timer @chown @setuid @privileged @keyring @ipc +SystemCallErrorNumber=EPERM +StateDirectory=matrix-conduit + +RuntimeDirectory=conduwuit +RuntimeDirectoryMode=0750 + +Environment="CONDUIT_CONFIG=/etc/conduwuit/conduwuit.toml" + +ExecStart=/usr/bin/conduwuit +Restart=on-failure +RestartSec=5 + +TimeoutStopSec=4m +TimeoutStartSec=4m + +StartLimitInterval=1m +StartLimitBurst=5 + +[Install] +WantedBy=multi-user.target |