msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-16 09:06:59 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

systemd: decomission everythang

Browse source 
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
Harsh Shandilya 2020-08-24 16:42:19 +05:30
parent f81856d952
commit 140aba4e23
No known key found for this signature in database
GPG key ID: 366D7BBAD1031E80
5 changed files with 1 additions and 137 deletions
Download patch file Download diff file Expand all files Collapse all files

31
systemd_units/walls-bot-rs.service
View file

@ -1,31 +0,0 @@
[Unit]
Description=walls-bot-rs service
After=network.target
[Service]
Restart=on-abort
Type=simple
User=bot
WorkingDirectory=/home/bot/walls-bot-rs
ExecStartPre=/usr/bin/git pull origin develop
ExecStart=/home/bot/.cargo/bin/cargo run --release
ExecReload=/bin/kill -USR1 $MAINPID
KillMode=mixed
KillSignal=SIGQUIT
TimeoutStopSec=5s
# Security
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
ProtectControlGroups=true
ProtectKernelModules=true
ProtectKernelTunables=true
PrivateDevices=true
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=true
RestrictRealtime=true
SystemCallArchitectures=native
[Install]
WantedBy=multi-user.target