summarylogtreecommitdiffstats
path: root/graphite-web.service
diff options
context:
space:
mode:
Diffstat (limited to 'graphite-web.service')
-rw-r--r--graphite-web.service21
1 files changed, 21 insertions, 0 deletions
diff --git a/graphite-web.service b/graphite-web.service
new file mode 100644
index 000000000000..1853156e128a
--- /dev/null
+++ b/graphite-web.service
@@ -0,0 +1,21 @@
+[Unit]
+Description=Graphite-web daemon
+After=network.target
+
+[Service]
+Environment=PYTHONPATH=/opt/graphite/whisper
+ExecStart=/opt/graphite/bin/run-graphite-devel-server.py --libs=/opt/graphite/webapp/ /opt/graphite/
+Type=simple
+
+# some hardening
+PrivateTmp=true
+PrivateDevices=true
+ProtectSystem=full
+ProtectHome=true
+NoNewPrivileges=true
+CapabilityBoundingSet=
+ReadOnlyPaths=/
+
+[Install]
+WantedBy=multi-user.target
+