msfjarvis/server-config
1
Fork 0
mirror of https://github.com/msfjarvis/server-config synced 2025-08-15 22:37:00 +05:30
Code Issues Projects Releases Packages Wiki Activity Actions

c9: Sync some security settings with caddy upstream

Browse source 
Signed-off-by: Harsh Shandilya <harsh@prjkt.io>
This commit is contained in:
Harsh Shandilya 2018-02-14 23:12:12 +05:30
parent be6bc18625
commit 3c4bef4409
No known key found for this signature in database
GPG key ID: 4AD75758D9EE741C
1 changed files with 17 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

19
c9.service
View file

@ -1,13 +1,28 @@
[Unit] [Unit]
Description=Jarvis-CI-Bot service Description=cloud9 local IDE
After=network.target After=network.target
[Service] [Service]
Restart=on-abort
Type=simple Type=simple
User=msfjarvis User=msfjarvis
WorkingDirectory=/home/msfjarvis WorkingDirectory=/home/msfjarvis
ExecStart=/usr/bin/node /etc/caddy/core/server.js -p 8080 -a : -w ~/ ExecStart=/usr/bin/node /etc/caddy/core/server.js -p 8080 -a : -w ~/
Restart=on-abort ExecReload=/bin/kill -USR1 $MAINPID
; Use graceful shutdown with a reasonable timeout
KillMode=mixed
KillSignal=SIGQUIT
TimeoutStopSec=5s
; Use private /tmp and /var/tmp, which are discarded after caddy stops.
PrivateTmp=true
; Use a minimal /dev (May bring additional security if switched to 'true', but it may not work on Raspberry Pi's or other devices, so it has been disabled in this dist.)
PrivateDevices=false
; Hide /home, /root, and /run/user. Nobody will steal your SSH-keys.
ProtectHome=true
; Make /usr, /boot, /etc and possibly some more folders read-only.
ProtectSystem=full
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target