diff options
author | MGislv | 2022-06-28 20:42:08 +0200 |
---|---|---|
committer | MGislv | 2022-06-28 20:42:08 +0200 |
commit | d967f9913b6272df20a205af635cdca47749ff34 (patch) | |
tree | f2876d26c5aede9e15934d7b0fdc07bfcaf76dc5 /teddit.service | |
parent | cb1ba024d923db1560a61024df98ed20896a8450 (diff) | |
download | aur-teddit-git.tar.gz |
Update
Diffstat (limited to 'teddit.service')
-rw-r--r-- | teddit.service | 30 |
1 files changed, 28 insertions, 2 deletions
diff --git a/teddit.service b/teddit.service index 73bbfc48d738..a5c6feb52234 100644 --- a/teddit.service +++ b/teddit.service @@ -1,9 +1,35 @@ [Unit] Description=Teddit Daemon -After=network.service +After=network.target +After=redis.service [Service] -ExecStart=/usr/bin/teddit +User=teddit +Group=teddit +Type=simple +WorkingDirectory=/opt/teddit +Restart=always +RestartSec=2s +ReadWritePaths=/opt/teddit +ExecStart=/usr/bin/node app.js +PrivateTmp=true +CapabilityBoundingSet= +NoNewPrivileges=true +LockPersonality=true +PrivateDevices=true +ProtectClock=true +ProtectControlGroups=true +ProtectHome=true +ProtectHostname=true +ProtectKernelLogs=true +ProtectKernelModules=true +ProtectKernelTunables=true +ProtectProc=noaccess +ProtectSystem=strict +RestrictNamespaces=true +RestrictRealtime=true +RestrictSUIDSGID=true +SystemCallArchitectures=native [Install] WantedBy=multi-user.target |