diff --git a/systemd_units/update.sh b/systemd_units/update.sh index 4823ff6..92e4770 100755 --- a/systemd_units/update.sh +++ b/systemd_units/update.sh @@ -8,7 +8,7 @@ function prettyPrint() { } # Grab all service names -declare -a services=('mirror-bot' 'mirror-bot-2' 'uno-bot') +declare -a services=('mirror-bot' 'mirror-bot-2' 'walls-bot-rs') # Now loop through each service and install it for service in "${services[@]}"; do diff --git a/systemd_units/walls-bot-rs.service b/systemd_units/walls-bot-rs.service new file mode 100644 index 0000000..858440e --- /dev/null +++ b/systemd_units/walls-bot-rs.service @@ -0,0 +1,31 @@ +[Unit] +Description=walls-bot-rs service +After=network.target + +[Service] +Restart=on-abort +Type=simple +User=bot +WorkingDirectory=/home/bot +EnvironmentFile=/home/bot/walls-bot.config +ExecStart=/usr/bin/walls-bot-rs +ExecReload=/bin/kill -USR1 $MAINPID +KillMode=mixed +KillSignal=SIGQUIT +TimeoutStopSec=5s + +# Security +PrivateTmp=true +ProtectSystem=full +NoNewPrivileges=true +ProtectControlGroups=true +ProtectKernelModules=true +ProtectKernelTunables=true +PrivateDevices=true +RestrictAddressFamilies=AF_INET AF_INET6 +RestrictNamespaces=true +RestrictRealtime=true +SystemCallArchitectures=native + +[Install] +WantedBy=multi-user.target