diff options
Diffstat (limited to 'writefreely.service')
-rw-r--r-- | writefreely.service | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/writefreely.service b/writefreely.service new file mode 100644 index 000000000000..4672206f42b6 --- /dev/null +++ b/writefreely.service @@ -0,0 +1,34 @@ +[Unit] +Description=Write Freely +After=syslog.target +After=network.target +After=mysqld.service +After=mariadb.service + +[Service] +User=writefreely +Group=writefreely +Type=simple +WorkingDirectory=/var/lib/writefreely +ExecStart=/usr/bin/writefreely +Restart=always +RestartSec=2s +CapabilityBoundingSet= +NoNewPrivileges=true +PrivateUsers=true +PrivateDevices=true +PrivateTmp=true +ProtectHome=true +ProtectSystem=strict +ProtectControlGroups=yes +ProtectKernelTunables=true +ProtectKernelModules=yes +ReadWritePaths=/var/lib/writefreely +LockPersonality=true +MemoryDenyWriteExecute=true +RestrictRealtime=true +SystemCallArchitectures=native +SystemCallFilter=@system-service + +[Install] +WantedBy=multi-user.target |