diff options
| author | celogeek | 2021-04-08 22:58:17 +0200 |
|---|---|---|
| committer | celogeek | 2021-04-10 09:23:11 +0200 |
| commit | a1757288a2dca5135b700b24e96468c268934ed5 (patch) | |
| tree | 0bec51453f63c27e5725953e927bc4a0f9209240 /service | |
| parent | 743252df19240e113997ac80552647c5788645d0 (diff) | |
| download | aur-a1757288a2dca5135b700b24e96468c268934ed5.tar.gz | |
unified config of jitsi-meet on arch
Diffstat (limited to 'service')
| -rw-r--r-- | service | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/service b/service new file mode 100644 index 000000000000..c233c2b3592e --- /dev/null +++ b/service @@ -0,0 +1,30 @@ +[Unit] +Description=Jitsi-Meet Conference Focus +After=network-online.target + +[Service] +EnvironmentFile=/etc/jicofo/config +User=jicofo +ExecStart=/usr/lib/jicofo/jicofo.sh --host=${JICOFO_HOST} --domain=${JICOFO_HOSTNAME} --port=${JICOFO_PORT} --user_name=${JICOFO_AUTH_USER} --user_domain=${JICOFO_AUTH_DOMAIN} ${JICOFO_OPTS} +WorkingDirectory=/var/lib/jicofo +StateDirectory=jicofo +StateDirectoryMode=0750 +LogsDirectory=jicofo +LogsDirectoryMode=0750 +ConfigurationDirectory=jicofo +ConfigurationDirectoryMode=0700 + +Restart=on-failure +SuccessExitStatus=143 + +# Hardening +NoNewPrivileges=yes +PrivateTmp=yes +PrivateDevices=yes +ProtectHome=yes +ProtectKernelTunables=yes +ProtectControlGroups=yes +ProtectSystem=strict + +[Install] +WantedBy=multi-user.target |