summarylogtreecommitdiffstats
path: root/prometheus-postgresql-exporter.service
diff options
context:
space:
mode:
authorManuel Hüsers2021-01-24 20:55:39 +0100
committerManuel Hüsers2021-01-24 20:55:39 +0100
commit4b7cc065d2fcf520159ad7941536b9c5bd6fb07f (patch)
tree72e249e1501cbdb0c8c40f9695b8e23b13813b82 /prometheus-postgresql-exporter.service
parent46489b2f851fc02a13117f6440e1a07dd8fa96c3 (diff)
downloadaur-4b7cc065d2fcf520159ad7941536b9c5bd6fb07f.tar.gz
Update systemd service and add EnvironmentFile
Diffstat (limited to 'prometheus-postgresql-exporter.service')
-rw-r--r--prometheus-postgresql-exporter.service20
1 files changed, 18 insertions, 2 deletions
diff --git a/prometheus-postgresql-exporter.service b/prometheus-postgresql-exporter.service
index 6f7f07cdaaeb..f519e7265ca0 100644
--- a/prometheus-postgresql-exporter.service
+++ b/prometheus-postgresql-exporter.service
@@ -2,8 +2,24 @@
Description=Prometheus exporter for PostgreSQL
After=network.target
-[Service]
-ExecStart=/usr/bin/prometheus_postgresql_exporter
+EnvironmentFile=-/etc/conf.d/prometheus-postgresql-exporter
+ExecStart=/usr/bin/prometheus_postgresql_exporter $POSTGRES_EXPORTER_ARGS
+Restart=on-failure
+
+DynamicUser=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+LockPersonality=true
+ProtectHostname=true
+ProtectHome=true
+ProtectClock=true
+ProtectControlGroups=true
+ProtectKernelLogs=true
+PrivateDevices=true
+PrivateUsers=true
+RestrictRealtime=true
+CapabilityBoundingSet=
+MemoryDenyWriteExecute=true
[Install]
WantedBy=multi-user.target