summarylogtreecommitdiffstats
path: root/teddit.service
diff options
context:
space:
mode:
authorMGislv2022-06-28 20:42:08 +0200
committerMGislv2022-06-28 20:42:08 +0200
commitd967f9913b6272df20a205af635cdca47749ff34 (patch)
treef2876d26c5aede9e15934d7b0fdc07bfcaf76dc5 /teddit.service
parentcb1ba024d923db1560a61024df98ed20896a8450 (diff)
downloadaur-teddit-git.tar.gz
Update
Diffstat (limited to 'teddit.service')
-rw-r--r--teddit.service30
1 files changed, 28 insertions, 2 deletions
diff --git a/teddit.service b/teddit.service
index 73bbfc48d738..a5c6feb52234 100644
--- a/teddit.service
+++ b/teddit.service
@@ -1,9 +1,35 @@
[Unit]
Description=Teddit Daemon
-After=network.service
+After=network.target
+After=redis.service
[Service]
-ExecStart=/usr/bin/teddit
+User=teddit
+Group=teddit
+Type=simple
+WorkingDirectory=/opt/teddit
+Restart=always
+RestartSec=2s
+ReadWritePaths=/opt/teddit
+ExecStart=/usr/bin/node app.js
+PrivateTmp=true
+CapabilityBoundingSet=
+NoNewPrivileges=true
+LockPersonality=true
+PrivateDevices=true
+ProtectClock=true
+ProtectControlGroups=true
+ProtectHome=true
+ProtectHostname=true
+ProtectKernelLogs=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectProc=noaccess
+ProtectSystem=strict
+RestrictNamespaces=true
+RestrictRealtime=true
+RestrictSUIDSGID=true
+SystemCallArchitectures=native
[Install]
WantedBy=multi-user.target