diff options
| author | metamuffin <metamuffin@disroot.org> | 2024-10-12 16:39:21 +0200 |
|---|---|---|
| committer | metamuffin <metamuffin@disroot.org> | 2024-10-12 16:39:21 +0200 |
| commit | a9fd82ae18eb67f6288d46d40bc893598922d181 (patch) | |
| tree | 0f8f2d2cef42fcac145d5beb097e76197bc6f232 /keks-meet-server-git/keks-meet-server.service | |
| download | pkgbuilds-a9fd82ae18eb67f6288d46d40bc893598922d181.tar pkgbuilds-a9fd82ae18eb67f6288d46d40bc893598922d181.tar.bz2 pkgbuilds-a9fd82ae18eb67f6288d46d40bc893598922d181.tar.zst | |
add existing pkgbuilds
Diffstat (limited to 'keks-meet-server-git/keks-meet-server.service')
| -rw-r--r-- | keks-meet-server-git/keks-meet-server.service | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/keks-meet-server-git/keks-meet-server.service b/keks-meet-server-git/keks-meet-server.service new file mode 100644 index 0000000..79c55cd --- /dev/null +++ b/keks-meet-server-git/keks-meet-server.service @@ -0,0 +1,34 @@ +[Unit] +Description=keks-meet Server Daemon +After=network.target +Wants=network-online.target + +[Service] +AmbientCapabilities=CAP_NET_BIND_SERVICE +CapabilityBoundingSet=CAP_NET_BIND_SERVICE +ExecStart=/usr/bin/keks-meet-server /etc/keks-meet-server.toml +User=keks-meet-server +LockPersonality=yes +MemoryDenyWriteExecute=yes +NoNewPrivileges=yes +PrivateDevices=true +PrivateTmp=true +ProtectClock=yes +ProtectControlGroups=yes +ProtectHome=true +ProtectHostname=yes +ProtectKernelLogs=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +ProtectSystem=full +RestrictAddressFamilies=~AF_PACKET AF_NETLINK +RestrictNamespaces=yes +RestrictSUIDSGID=yes +RestrictRealtime=yes +Restart=always +SystemCallArchitectures=native +SystemCallFilter=@system-service +Type=simple + +[Install] +WantedBy=multi-user.target |