straywild-discovery-server/deploy/straywild-discovery.service

27 lines
628 B
Desktop File

[Unit]
Description=straywild public room discovery service
After=network-online.target
Wants=network-online.target
[Service]
Type=simple
User=straywild-discovery
Group=straywild-discovery
WorkingDirectory=/var/www/straywild.io.discovery
EnvironmentFile=/etc/straywild-discovery.env
ExecStart=/usr/bin/python3 -m straywild_discovery
Restart=on-failure
RestartSec=2
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictSUIDSGID=true
LockPersonality=true
MemoryDenyWriteExecute=true
[Install]
WantedBy=multi-user.target