blob: e26e216f44813297b078f1bea0610eb64aff1274 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
[Unit]
Description=Graphite-api daemon
After=network.target
[Service]
# listening address can be configured via a drop-in
Environment=LISTEN=127.0.0.1:8888 WORKERS=2
ExecStart=/usr/bin/gunicorn -w $WORKERS graphite_api.app:app -b $LISTEN
Type=simple
# some hardening
PrivateTmp=true
PrivateDevices=true
ProtectSystem=full
ProtectHome=true
NoNewPrivileges=true
CapabilityBoundingSet=
ReadOnlyPaths=/
[Install]
WantedBy=multi-user.target
|