mirror of
https://github.com/telemt/telemt.git
synced 2026-06-19 02:00:08 +07:00
30 lines
645 B
Desktop File
30 lines
645 B
Desktop File
|
[Unit]
|
||
|
|
Description=Telemt
|
||
|
|
Wants=network-online.target
|
||
|
|
After=multi-user.target network.target network-online.target
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
Type=simple
|
||
|
|
User=telemt
|
||
|
|
Group=telemt
|
||
|
|
WorkingDirectory=/var/lib/telemt
|
||
|
|
ExecStart=/bin/telemt /etc/telemt/telemt.toml
|
||
|
|
Restart=on-failure
|
||
|
|
RestartSec=10
|
||
|
|
LimitNOFILE=65536
|
||
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||
|
|
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
|
||
|
|
NoNewPrivileges=true
|
||
|
|
PrivateTmp=yes
|
||
|
|
PrivateDevices=yes
|
||
|
|
ProtectKernelTunables=yes
|
||
|
|
ProtectKernelModules=yes
|
||
|
|
ProtectControlGroups=yes
|
||
|
|
ProtectSystem=strict
|
||
|
|
ProtectHome=read-only
|
||
|
|
SystemCallFilter=~@mount
|
||
|
|
ReadWritePaths=/var/lib/telemt
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|