blob: cf7f63a7265518d928ec23c7bf9df3525989685a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
[Unit]
Description=Opencloud daemon
After=syslog.target network.target
[Service]
User=oceu
Group=oceu
Type=simple
Environment=OC_BASE_DATA_PATH=/var/lib/opencloud
Environment=OC_CONFIG_DIR=/etc/opencloud
EnvironmentFile=/etc/opencloud/opencloud.env
ExecStart=/usr/bin/opencloud server
WorkingDirectory=/var/lib/opencloud
# Sandboxing
#ProtectProc=invisible
#ProtectSystem=strict
ReadWritePaths=/var/lib/opencloud
ProtectHome=yes
PrivateTmp=yes
#PrivateDevices=yes
#PrivateIPC=yes
#PrivateUsers=yes
#ProtectHostname=yes
#ProtectClock=yes
#ProtectKernelTunables=yes
#ProtectKernelModules=yes
#ProtectKernelLogs=yes
#ProtectControlGroups=yes
#RestrictNamespaces=yes
#LockPersonality=yes
#RestrictSUIDSGID=yes
#RemoveIPC=yes
#NoNewPrivileges=yes
SystemCallArchitectures=native
TimeoutStopSec=120
Restart=on-failure
[Install]
WantedBy=multi-user.target
|