blob: a8d4e97a3ee20637089fa6d95430f5285446482f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
[Unit]
Description=Syncplay IRC Bridge
Wants=network.target
After=syncplay.service stunnel.service
BindsTo=syncplay.service stunnel.service
[Service]
User=syncplay
Group=syncplay
ExecStart=/bin/bash /usr/local/bin/syncplay-bridge
ProtectSystem=strict
ProtectHome=yes
PrivateDevices=yes
PrivateTmp=yes
PrivateUsers=yes
ProtectKernelTunables=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
ReadWritePaths=/var/lib/syncplay
RestrictAddressFamilies=AF_INET6
SystemCallArchitectures=native
SystemCallFilter=@system-service
[Install]
WantedBy=multi-user.target
|
