diff options
author | George Rawlinson | 2021-05-19 00:10:30 +0000 |
---|---|---|
committer | George Rawlinson | 2021-05-19 00:29:36 +0000 |
commit | 05ab4de3a1dd8796faaf6d62eb423b6653e24569 (patch) | |
tree | c161bc5b517e2d82dd595b3810f30342ee0375dc /systemd.service | |
parent | 18fd2d03e0832394dadf375a8566961bb0e1e41b (diff) | |
download | aur-05ab4de3a1dd8796faaf6d62eb423b6653e24569.tar.gz |
upgpkg: promscale 0.4.0-1
New upstream release.
Renamed systemd files to be more descriptive, naming them after $pkgname
is a bit ambiguous.
Diffstat (limited to 'systemd.service')
-rw-r--r-- | systemd.service | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/systemd.service b/systemd.service new file mode 100644 index 000000000000..fe8656db898f --- /dev/null +++ b/systemd.service @@ -0,0 +1,46 @@ +[Unit] +Description=Promscale service +Documentation=https://github.com/timescale/promscale +Requires=network-online.target +After=network-online.target + +[Service] +User=promscale +Group=promscale +Restart=on-failure +RestartSec=5s +EnvironmentFile=-/etc/conf.d/promscale +ExecStart=/usr/bin/promscale $PROMSCALE_ARGS +ExecReload=/bin/kill -HUP $MAINPID + +NoNewPrivileges=true +ProtectSystem=strict +ProtectHome=true +PrivateTmp=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 +RestrictNamespaces=true +LockPersonality=true +MemoryDenyWriteExecute=true +RestrictRealtime=true +RestrictSUIDSGID=true +RemoveIPC=true +CapabilityBoundingSet= +AmbientCapabilities= +PrivateUsers=true + +SystemCallFilter=@system-service +SystemCallFilter=~@privileged @resources +SystemCallArchitectures=native + +LimitNOFILE=1048576 +UMask=0077 + +[Install] +WantedBy=multi-user.target |