systemd: revive walls-bot-rs
Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
parent
064b0f9c0a
commit
d996c707c6
|
@ -8,7 +8,7 @@ function prettyPrint() {
|
|||
}
|
||||
|
||||
# Grab all service names
|
||||
declare -a services=('mirror-bot' 'mirror-bot-2' 'uno-bot')
|
||||
declare -a services=('mirror-bot' 'mirror-bot-2' 'walls-bot-rs')
|
||||
|
||||
# Now loop through each service and install it
|
||||
for service in "${services[@]}"; do
|
||||
|
|
|
@ -0,0 +1,31 @@
|
|||
[Unit]
|
||||
Description=walls-bot-rs service
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Restart=on-abort
|
||||
Type=simple
|
||||
User=bot
|
||||
WorkingDirectory=/home/bot
|
||||
EnvironmentFile=/home/bot/walls-bot.config
|
||||
ExecStart=/usr/bin/walls-bot-rs
|
||||
ExecReload=/bin/kill -USR1 $MAINPID
|
||||
KillMode=mixed
|
||||
KillSignal=SIGQUIT
|
||||
TimeoutStopSec=5s
|
||||
|
||||
# Security
|
||||
PrivateTmp=true
|
||||
ProtectSystem=full
|
||||
NoNewPrivileges=true
|
||||
ProtectControlGroups=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelTunables=true
|
||||
PrivateDevices=true
|
||||
RestrictAddressFamilies=AF_INET AF_INET6
|
||||
RestrictNamespaces=true
|
||||
RestrictRealtime=true
|
||||
SystemCallArchitectures=native
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
Loading…
Reference in New Issue