Cleanup
This commit is contained in:
parent
3892a47658
commit
446773b688
|
@ -7,6 +7,6 @@ Configuration files for various parts of my webserver
|
|||
- [nginx](nginx): NGINX configurations for the sites I self-host.
|
||||
- [dl.msfjarvis.dev](nginx/dl.msfjarvis.dev): NGINX config for my download host
|
||||
- [systemd-units](systemd_units): Systemd units for various custom services I have on the webserver.
|
||||
- [mirror-bot.service](systemd_units/mirror-bot.service), [mirror-bot-2.service](systemd_units/mirror-bot-2.service): Systemd units for my copies of [aria-telegram-mirror-bot](https://github.com/out386/aria-telegram-mirror-bot).
|
||||
- [mirror-bot.service](systemd_units/mirror-bot.service): Systemd unit for [aria-telegram-mirror-bot](https://github.com/out386/aria-telegram-mirror-bot).
|
||||
- [uno-bot.service](systemd_units/uno-bot.service): Service unit for the [mau_mau_bot](https://github.com/msfjarvis/mau_mau_bot) instance I run to play UNO with friends.
|
||||
- [topgrade.toml](topgrade.toml): Config file for [topgrade](https://github.com/r-darwish/topgrade).
|
||||
|
|
|
@ -1,31 +0,0 @@
|
|||
[Unit]
|
||||
Description=Private mirror bot service
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Restart=on-abort
|
||||
Type=simple
|
||||
User=bot
|
||||
WorkingDirectory=/home/bot/aria-telegram-mirror-bot-2
|
||||
ExecStartPre=/usr/bin/env bash aria.sh
|
||||
ExecStart=/usr/bin/npm start
|
||||
ExecReload=/bin/kill -USR1 $MAINPID
|
||||
KillMode=mixed
|
||||
KillSignal=SIGQUIT
|
||||
TimeoutStopSec=5s
|
||||
|
||||
# Security
|
||||
PrivateTmp=true
|
||||
ProtectSystem=full
|
||||
NoNewPrivileges=true
|
||||
ProtectControlGroups=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelTunables=true
|
||||
PrivateDevices=true
|
||||
RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK
|
||||
RestrictNamespaces=true
|
||||
RestrictRealtime=true
|
||||
SystemCallArchitectures=native
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
Loading…
Reference in New Issue