diff options
| author | metamuffin <metamuffin@disroot.org> | 2025-05-19 19:38:08 +0200 |
|---|---|---|
| committer | metamuffin <metamuffin@disroot.org> | 2025-05-19 19:38:08 +0200 |
| commit | 8d92484c2edc1ad78c2ba02e6f78353a58295809 (patch) | |
| tree | 1127dae971c9c3ff3a91cd6bd6babc622482bdba /isdaw-git/isdad.service | |
| parent | 85b0d049ea55e640704ffcc2da398c3bd18b52e4 (diff) | |
| download | pkgbuilds-8d92484c2edc1ad78c2ba02e6f78353a58295809.tar pkgbuilds-8d92484c2edc1ad78c2ba02e6f78353a58295809.tar.bz2 pkgbuilds-8d92484c2edc1ad78c2ba02e6f78353a58295809.tar.zst | |
add isda
Diffstat (limited to 'isdaw-git/isdad.service')
| -rw-r--r-- | isdaw-git/isdad.service | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/isdaw-git/isdad.service b/isdaw-git/isdad.service new file mode 100644 index 0000000..42ac404 --- /dev/null +++ b/isdaw-git/isdad.service @@ -0,0 +1,32 @@ +[Unit] +Description=industrial-scale downloading agent daemon process +After=network.target +Wants=network-online.target + +[Service] +ExecStart=/usr/bin/isdad /etc/isdad-worker-conf.yaml +User=isda +LockPersonality=yes +MemoryDenyWriteExecute=yes +NoNewPrivileges=yes +PrivateDevices=true +PrivateTmp=true +ProtectClock=yes +ProtectControlGroups=yes +ProtectHome=true +ProtectHostname=yes +ProtectKernelLogs=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +ProtectSystem=full +RestrictAddressFamilies=~AF_PACKET AF_NETLINK +RestrictNamespaces=yes +RestrictSUIDSGID=yes +RestrictRealtime=yes +Restart=always +SystemCallArchitectures=native +SystemCallFilter=@system-service +Type=simple + +[Install] +WantedBy=multi-user.target |