diff options
Diffstat (limited to 'service')
-rw-r--r-- | service | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/service b/service new file mode 100644 index 000000000000..c233c2b3592e --- /dev/null +++ b/service @@ -0,0 +1,30 @@ +[Unit] +Description=Jitsi-Meet Conference Focus +After=network-online.target + +[Service] +EnvironmentFile=/etc/jicofo/config +User=jicofo +ExecStart=/usr/lib/jicofo/jicofo.sh --host=${JICOFO_HOST} --domain=${JICOFO_HOSTNAME} --port=${JICOFO_PORT} --user_name=${JICOFO_AUTH_USER} --user_domain=${JICOFO_AUTH_DOMAIN} ${JICOFO_OPTS} +WorkingDirectory=/var/lib/jicofo +StateDirectory=jicofo +StateDirectoryMode=0750 +LogsDirectory=jicofo +LogsDirectoryMode=0750 +ConfigurationDirectory=jicofo +ConfigurationDirectoryMode=0700 + +Restart=on-failure +SuccessExitStatus=143 + +# Hardening +NoNewPrivileges=yes +PrivateTmp=yes +PrivateDevices=yes +ProtectHome=yes +ProtectKernelTunables=yes +ProtectControlGroups=yes +ProtectSystem=strict + +[Install] +WantedBy=multi-user.target |