blob: 26a01195c0a6138f5660eba1d1b5084883e5ec64 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
[Unit]
Description=audiowarden - Skip spotify songs you don't like
[Service]
ExecStart=/usr/bin/audiowarden
Restart=on-failure
RestartSec=1
Environment="RUST_LOG=debug"
Environment="RUST_BACKTRACE=1"
# Hardening
ProtectSystem=full
PrivateTmp=true
SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateNetwork=true
# Hide files in the user's home directory:
TemporaryFileSystem=/home
# But still allow access to the config directory within the user's home directory:
ConfigurationDirectory=audiowarden
[Install]
WantedBy=default.target
|