msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-14 08:17:01 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

systemd: simplify walls-bot-rs service

Browse source
This commit is contained in:
Harsh Shandilya 2022-07-08 12:48:32 +05:30
parent 781320644a
commit 3892a47658
No known key found for this signature in database
GPG key ID: 366D7BBAD1031E80
1 changed files with 2 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

9
systemd_units/walls-bot-rs.service
View file

@ -10,22 +10,17 @@ WorkingDirectory=/home/bot
EnvironmentFile=/home/bot/walls-bot.config EnvironmentFile=/home/bot/walls-bot.config
ExecStart=/usr/bin/walls-bot-rs ExecStart=/usr/bin/walls-bot-rs
ExecReload=/bin/kill -USR1 $MAINPID ExecReload=/bin/kill -USR1 $MAINPID
ReadOnlyDirectories=/var/www/dl.msfjarvis.dev/.walls
KillMode=mixed KillMode=mixed
KillSignal=SIGQUIT KillSignal=SIGINT
TimeoutStopSec=5s TimeoutStopSec=10s
# Security # Security
PrivateTmp=true PrivateTmp=true
ProtectSystem=full ProtectSystem=full
NoNewPrivileges=true
ProtectControlGroups=true ProtectControlGroups=true
ProtectKernelModules=true ProtectKernelModules=true
ProtectKernelTunables=true ProtectKernelTunables=true
PrivateDevices=true PrivateDevices=true
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=true
RestrictRealtime=true
SystemCallArchitectures=native SystemCallArchitectures=native
[Install] [Install]