diff --git a/mirror-bot-2.service b/mirror-bot-2.service new file mode 100644 index 0000000..9741da3 --- /dev/null +++ b/mirror-bot-2.service @@ -0,0 +1,27 @@ +[Unit] +Description=aria2 mirror Telegram bot service +After=network.target + +[Service] +Restart=on-abort +Type=simple +User=bot +WorkingDirectory=/home/bot/aria-telegram-mirror-bot-2 +ExecStartPre=/usr/bin/env bash aria.sh +ExecStart=/usr/bin/npm start +ExecReload=/bin/kill -USR1 $MAINPID + +; Use graceful shutdown with a reasonable timeout +KillMode=mixed +KillSignal=SIGQUIT +TimeoutStopSec=5s + +; Use private /tmp and /var/tmp, which are discarded after the process stops. +PrivateTmp=true +; Use a minimal /dev (May bring additional security if switched to 'true', but it may not work on Raspberry Pi's or other devices, so it has been disabled in this dist.) +PrivateDevices=true +; Make /usr, /boot, /etc and possibly some more folders read-only. +ProtectSystem=full + +[Install] +WantedBy=multi-user.target diff --git a/update.sh b/update.sh index d3198d4..ff2226e 100755 --- a/update.sh +++ b/update.sh @@ -8,7 +8,7 @@ function prettyPrint { } # Grab all service names -declare -a services=('androidx-release-watcher' 'caddy' 'gitea' 'horbiswalls-bot' 'mirror-bot' 'uno-bot', 'walls-bot') +declare -a services=('androidx-release-watcher' 'caddy' 'gitea' 'horbiswalls-bot' 'mirror-bot' 'mirror-bot-2' 'uno-bot' 'walls-bot' 'walls-bot-2') declare -a timers=('release-watcher-recent') # Now loop through each service and install it diff --git a/walls-bot-2.service b/walls-bot-2.service new file mode 100644 index 0000000..fe85c49 --- /dev/null +++ b/walls-bot-2.service @@ -0,0 +1,26 @@ +[Unit] +Description=horbiswalls Telegram bot service +After=network.target + +[Service] +Restart=on-abort +Type=simple +User=bot +WorkingDirectory=/home/bot/walls-bot-2 +ExecStart=/home/bot/walls-bot/gradlew run +ExecReload=/bin/kill -USR1 $MAINPID + +; Use graceful shutdown with a reasonable timeout +KillMode=mixed +KillSignal=SIGQUIT +TimeoutStopSec=5s + +; Use private /tmp and /var/tmp, which are discarded after the process stops. +PrivateTmp=true +; Use a minimal /dev (May bring additional security if switched to 'true', but it may not work on Raspberry Pi's or other devices, so it has been disabled in this dist.) +PrivateDevices=false +; Make /usr, /boot, /etc and possibly some more folders read-only. +ProtectSystem=full + +[Install] +WantedBy=multi-user.target