diff options
Diffstat (limited to 'systemd.service')
-rw-r--r-- | systemd.service | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/systemd.service b/systemd.service new file mode 100644 index 000000000000..fe8656db898f --- /dev/null +++ b/systemd.service @@ -0,0 +1,46 @@ +[Unit] +Description=Promscale service +Documentation=https://github.com/timescale/promscale +Requires=network-online.target +After=network-online.target + +[Service] +User=promscale +Group=promscale +Restart=on-failure +RestartSec=5s +EnvironmentFile=-/etc/conf.d/promscale +ExecStart=/usr/bin/promscale $PROMSCALE_ARGS +ExecReload=/bin/kill -HUP $MAINPID + +NoNewPrivileges=true +ProtectSystem=strict +ProtectHome=true +PrivateTmp=true +PrivateDevices=true +ProtectHostname=true +ProtectClock=true +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 +RestrictNamespaces=true +LockPersonality=true +MemoryDenyWriteExecute=true +RestrictRealtime=true +RestrictSUIDSGID=true +RemoveIPC=true +CapabilityBoundingSet= +AmbientCapabilities= +PrivateUsers=true + +SystemCallFilter=@system-service +SystemCallFilter=~@privileged @resources +SystemCallArchitectures=native + +LimitNOFILE=1048576 +UMask=0077 + +[Install] +WantedBy=multi-user.target |