summarylogtreecommitdiffstats
path: root/jitsi-videobridge.service
diff options
context:
space:
mode:
Diffstat (limited to 'jitsi-videobridge.service')
-rw-r--r--jitsi-videobridge.service25
1 files changed, 25 insertions, 0 deletions
diff --git a/jitsi-videobridge.service b/jitsi-videobridge.service
new file mode 100644
index 000000000000..302e347b03d8
--- /dev/null
+++ b/jitsi-videobridge.service
@@ -0,0 +1,25 @@
+[Unit]
+Description=Jitsi Videobridge
+After=network.target
+
+[Service]
+EnvironmentFile=/etc/jitsi/videobridge/config
+User=jitsi-videobridge
+ExecStart=/bin/bash /usr/share/jitsi-videobridge/jvb.sh --host=${JVB_HOST} --domain=${JVB_HOSTNAME} --port=${JVB_PORT} --secret=${JVB_SECRET} ${JVB_OPTS}
+WorkingDirectory=~
+StateDirectory=jitsi-videobridge
+StateDirectoryMode=0750
+LogsDirectory=jitsi-videobridge
+LogsDirectoryMode=0750
+
+# Hardening
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+ProtectSystem=strict
+
+[Install]
+WantedBy=multi-user.target