From 42456fce67ce29696580c843a8741ff0c186ab6d Mon Sep 17 00:00:00 2001
From: Pratyush Desai
Date: Fri, 13 Jun 2025 04:06:45 +0530
Subject: add duckbot (CloudBot) unit file. Fix formatting and add hardening
 variables

Signed-off-by: Pratyush Desai <pratyush.desai@liberta.casa>
---
 systemd/duckbot.service | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 systemd/duckbot.service

diff --git a/systemd/duckbot.service b/systemd/duckbot.service
new file mode 100644
index 0000000..fca274d
--- /dev/null
+++ b/systemd/duckbot.service
@@ -0,0 +1,20 @@
+[Unit]
+Description=CloudBot (duckbot)
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/duckbot/CloudBot
+ExecStart=/opt/duckbot/venv/bin/python -m cloudbot
+ExecReload=/bin/kill -HUP $MAINPID
+Restart=always
+User=duckbot
+Group=duckbot
+SyslogIdentifier=duckbot
+ProtectSystem=strict
+ProtectHome=yes
+NoNewPrivileges=true
+ReadWritePaths=/opt/duckbot/CloudBot
+
+[Install]
+WantedBy=multi-user.target
-- 
cgit v1.2.3