diff options
Diffstat (limited to 'teddit.service')
-rw-r--r-- | teddit.service | 30 |
1 files changed, 28 insertions, 2 deletions
diff --git a/teddit.service b/teddit.service index 73bbfc48d738..a5c6feb52234 100644 --- a/teddit.service +++ b/teddit.service @@ -1,9 +1,35 @@ [Unit] Description=Teddit Daemon -After=network.service +After=network.target +After=redis.service [Service] -ExecStart=/usr/bin/teddit +User=teddit +Group=teddit +Type=simple +WorkingDirectory=/opt/teddit +Restart=always +RestartSec=2s +ReadWritePaths=/opt/teddit +ExecStart=/usr/bin/node app.js +PrivateTmp=true +CapabilityBoundingSet= +NoNewPrivileges=true +LockPersonality=true +PrivateDevices=true +ProtectClock=true +ProtectControlGroups=true +ProtectHome=true +ProtectHostname=true +ProtectKernelLogs=true +ProtectKernelModules=true +ProtectKernelTunables=true +ProtectProc=noaccess +ProtectSystem=strict +RestrictNamespaces=true +RestrictRealtime=true +RestrictSUIDSGID=true +SystemCallArchitectures=native [Install] WantedBy=multi-user.target |