diff options
| author | Stonewall Jackson <stonewall@sacredheartsc.com> | 2023-02-04 01:23:43 -0500 |
|---|---|---|
| committer | Stonewall Jackson <stonewall@sacredheartsc.com> | 2023-02-04 01:52:13 -0500 |
| commit | 0261e875679f1bf63c8d689da7fc7e014597885d (patch) | |
| tree | 3f19cd74a0c1070944f75437f30b098d6ef2ffcb /roles/nitter/templates/etc/systemd/system/nitter.service.j2 | |
| download | selfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.tar.gz selfhosted-0261e875679f1bf63c8d689da7fc7e014597885d.zip | |
initial commit
Diffstat (limited to 'roles/nitter/templates/etc/systemd/system/nitter.service.j2')
| -rw-r--r-- | roles/nitter/templates/etc/systemd/system/nitter.service.j2 | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/roles/nitter/templates/etc/systemd/system/nitter.service.j2 b/roles/nitter/templates/etc/systemd/system/nitter.service.j2 new file mode 100644 index 0000000..59b0ba6 --- /dev/null +++ b/roles/nitter/templates/etc/systemd/system/nitter.service.j2 @@ -0,0 +1,34 @@ +[Unit] +Description=nitter twitter proxy +After=network.target redis@{{ nitter_redis_port }}.service +Requires=redis@{{ nitter_redis_port }}.service +AssertPathExists={{ nitter_install_dir }} + +[Service] +Type=simple +ExecStart={{ nitter_install_dir }}/nitter +WorkingDirectory={{ nitter_install_dir }} +User={{ nitter_user }} +Group={{ nitter_user }} +Restart=always +RestartSec=15 + +# See https://www.freedesktop.org/software/systemd/man/systemd.exec.html +# for details +DevicePolicy=closed +NoNewPrivileges=yes +PrivateDevices=yes +PrivateTmp=yes +ProtectControlGroups=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 +RestrictNamespaces=yes +RestrictRealtime=yes +SystemCallFilter=~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap + +ProtectSystem=full +ProtectHome=true + +[Install] +WantedBy=multi-user.target |