unified config of jitsi-meet on arch

1 files changed, 30 insertions, 0 deletions

diff --git a/service b/service
new file mode 100644
index 000000000000..e7bd5c9a5705
--- /dev/null
+++ b/service
@@ -0,0 +1,30 @@
+[Unit]
+Description=Jitsi-Meet Conference Focus
+After=network-online.target
+
+[Service]
+EnvironmentFile=/etc/jicofo-git/config
+User=jicofo
+ExecStart=/usr/lib/jicofo-git/jicofo.sh --host=${JICOFO_HOST} --domain=${JICOFO_HOSTNAME} --user_name=${JICOFO_AUTH_USER} --user_domain=${JICOFO_AUTH_DOMAIN} ${JICOFO_OPTS}
+WorkingDirectory=/var/lib/jicofo-git
+StateDirectory=jicofo-git
+StateDirectoryMode=0750
+LogsDirectory=jicofo-git
+LogsDirectoryMode=0750
+ConfigurationDirectory=jicofo-git
+ConfigurationDirectoryMode=0700
+
+Restart=on-failure
+SuccessExitStatus=143
+
+# Hardening
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+ProtectSystem=strict
+
+[Install]
+WantedBy=multi-user.target