diff options
author | metamuffin | 2024-01-05 16:27:05 +0100 |
---|---|---|
committer | metamuffin | 2024-01-05 16:27:05 +0100 |
commit | 5ba97fbada06e986e3cc23284a038f52477aaa7a (patch) | |
tree | 49ce7d9e85fd4f36abd4b138c5d7fe1770e895c7 /jellything.service | |
download | aur-5ba97fbada06e986e3cc23284a038f52477aaa7a.tar.gz |
a
Diffstat (limited to 'jellything.service')
-rw-r--r-- | jellything.service | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/jellything.service b/jellything.service new file mode 100644 index 000000000000..d89cc795e651 --- /dev/null +++ b/jellything.service @@ -0,0 +1,32 @@ +[Unit] +Description=jellything media streaming server +After=network.target +Wants=network-online.target + +[Service] +ExecStart=/usr/bin/jellything /etc/jellything.yaml +User=keks-meet-server +LockPersonality=yes +MemoryDenyWriteExecute=yes +NoNewPrivileges=yes +PrivateDevices=true +PrivateTmp=true +ProtectClock=yes +ProtectControlGroups=yes +ProtectHome=true +ProtectHostname=yes +ProtectKernelLogs=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +ProtectSystem=full +RestrictAddressFamilies=~AF_PACKET AF_NETLINK +RestrictNamespaces=yes +RestrictSUIDSGID=yes +RestrictRealtime=yes +Restart=always +SystemCallArchitectures=native +SystemCallFilter=@system-service +Type=simple + +[Install] +WantedBy=multi-user.target |