blob: dd7d3955c1fe5bf0ad1fac6bc301e6f3cf39bfd2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
# This file is shipped as part of the Takahe package.
# Author: Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>
[Unit]
Description=Takahe
After=postgresql.service
Wants=postgresql.service
PartOf=%N.target
[Service]
User=_%N
Group=_%N
EnvironmentFile=/etc/sysconfig/%N
ExecStart=/usr/bin/gunicorn %N.%N.wsgi:application -b "$BIND"
PrivateDevices=yes
PrivateTmp=yes
ProtectControlGroups=yes
ProtectHome=yes
ProtectKernelLogs=yes
ProtectSystem=strict
RestrictAddressFamilies=AF_INET6 AF_INET AF_UNIX
SystemCallArchitectures=native
SystemCallFilter=@system-service
ReadWritePaths=/srv/%N/media
[Install]
WantedBy=multi-user.target
|
