diff options
author | Severin Glöckner | 2018-10-08 05:31:43 +0200 |
---|---|---|
committer | Severin Glöckner | 2018-10-08 05:31:43 +0200 |
commit | 677862f37ca1b115c58019ad12fb1a98c4fb5592 (patch) | |
tree | 877e9925d3b8b2fda9002fc64fcf5fcea347e2c6 /wesnothd-1.6.service | |
download | aur-677862f37ca1b115c58019ad12fb1a98c4fb5592.tar.gz |
Wesnoth 1.6 for Archlinux
Diffstat (limited to 'wesnothd-1.6.service')
-rw-r--r-- | wesnothd-1.6.service | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/wesnothd-1.6.service b/wesnothd-1.6.service new file mode 100644 index 000000000000..73c02754d3cb --- /dev/null +++ b/wesnothd-1.6.service @@ -0,0 +1,35 @@ +[Unit] +Description=Wesnoth-1.6 Server Daemon +Documentation=https://www.wesnoth.org/wiki/ServerAdministration +Documentation=man:wesnoth-1.6(6) +After=network.target +# They use by default the same port +Conflicts=wesnothd.service wesnothd-1.12.service wesnothd-1.14.service wesnothd-git.service + +[Service] +ExecStart=/usr/bin/wesnothd-1.6 -t 2 -T 5 +# you can use -c to specify the same configuration file +# which is used when starting wensothd from the wesnoth UI +# (and make sure wesnothd has the required access permissions) + +SyslogIdentifier=Wesnothd-1.6 +User=nobody +Group=nobody +ExecStopPost=/usr/bin/rm -f /run/wesnothd-1.6/socket + +# Additional security-related features +ProtectSystem=yes +PrivateTmp=yes +PrivateDevices=yes +NoNewPrivileges=yes +RestrictAddressFamilies=AF_INET +RestrictRealtime=yes +MemoryDenyWriteExecute=yes +SystemCallArchitectures=native +ProtectControlGroups=yes +ProtectKernelTunables=yes +ProtectKernelModules=yes +RestrictNamespaces=yes + +[Install] +WantedBy=multi-user.target |