blob: 9f7a4e139e4097ab04b28669003783d05eed68ee (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
[Unit]
Description=The Free Network Project daemon
After=network.target time-sync.target
[Service]
Type=exec
User=freenet
Group=freenet
SyslogIdentifier=freenet
WorkingDirectory=/var/lib/freenet
RuntimeDirectory=freenet
StateDirectory=freenet
LogsDirectory=freenet
ConfigurationDirectory=freenet
PrivateTmp=yes
Nice=10
LimitNICE=+10
ExecStartPre=/usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/freenet.conf
ExecStart=/usr/lib/jvm/default/bin/java -classpath "/usr/share/java/freenet/*" -Djava.io.tmpdir=/tmp/ -Djava.security.properties=./java.security -XX:+ExitOnOutOfMemoryError -Dnetworkaddress.cache.ttl=0 -Dnetworkaddress.cache.negative.ttl=0 -Djava.net.preferIPv4Stack=false --illegal-access=permit --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED -Djna.nosys=false -Dfreenet.jce.use.NSS=true -Xss512k -Xms60m -Xmx1536m freenet.node.NodeStarter /etc/freenet/freenet.ini
Restart=on-failure
SuccessExitStatus=0 143
# See NodeStarter.java: WrapperManager.signalStarting(500000);
TimeoutStartSec=500
# See NodeStarter.java: WrapperManager.signalStopping(120000);
TimeoutStopSec=120
ProtectSystem=strict
ProtectHome=yes
ProtectClock=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
RestrictRealtime=yes
PrivateDevices=yes
LockPersonality=yes
RestrictNamespaces=yes
[Install]
WantedBy=multi-user.target
|