diff --git a/horbiswalls-bot.service b/horbiswalls-bot.service index fd1e80f..bc910b2 100644 --- a/horbiswalls-bot.service +++ b/horbiswalls-bot.service @@ -1,5 +1,5 @@ [Unit] -Description=horbiswalls Telegram Bot service +Description=horbiswalls Telegram bot service After=network.target [Service] @@ -15,7 +15,7 @@ KillMode=mixed KillSignal=SIGQUIT TimeoutStopSec=5s -; Use private /tmp and /var/tmp, which are discarded after caddy stops. +; Use private /tmp and /var/tmp, which are discarded after the process stops. PrivateTmp=true ; Use a minimal /dev (May bring additional security if switched to 'true', but it may not work on Raspberry Pi's or other devices, so it has been disabled in this dist.) PrivateDevices=false diff --git a/mirror-bot.service b/mirror-bot.service index 53adeb6..deab98d 100644 --- a/mirror-bot.service +++ b/mirror-bot.service @@ -1,5 +1,5 @@ [Unit] -Description=aria2 mirror Telegram Bot service +Description=aria2 mirror Telegram bot service After=network.target [Service] @@ -16,10 +16,10 @@ KillMode=mixed KillSignal=SIGQUIT TimeoutStopSec=5s -; Use private /tmp and /var/tmp, which are discarded after caddy stops. +; Use private /tmp and /var/tmp, which are discarded after the process stops. PrivateTmp=true ; Use a minimal /dev (May bring additional security if switched to 'true', but it may not work on Raspberry Pi's or other devices, so it has been disabled in this dist.) -PrivateDevices=false +PrivateDevices=true ; Make /usr, /boot, /etc and possibly some more folders read-only. ProtectSystem=full diff --git a/uno-bot.service b/uno-bot.service index 61389e5..d255822 100644 --- a/uno-bot.service +++ b/uno-bot.service @@ -1,5 +1,5 @@ [Unit] -Description=UNO Telegram Bot service +Description=UNO Telegram bot service After=network.target [Service] @@ -15,7 +15,7 @@ KillMode=mixed KillSignal=SIGQUIT TimeoutStopSec=5s -; Use private /tmp and /var/tmp, which are discarded after caddy stops. +; Use private /tmp and /var/tmp, which are discarded after the process stops. PrivateTmp=true ; Use a minimal /dev (May bring additional security if switched to 'true', but it may not work on Raspberry Pi's or other devices, so it has been disabled in this dist.) PrivateDevices=false