summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGab <24553253+gabrix73@users.noreply.github.com>2025-02-13 17:59:34 +0100
committerGitHub <noreply@github.com>2025-02-13 17:59:34 +0100
commit78e8e2b80153b84c09ddba51bdd81fdfac06bb0a (patch)
treec6f94a3c0c439f5a28842dd14cf6d089d293a475
parent142a3d8f73fe09c68f6cf1cd41b9094ed4b9bd7e (diff)
downloadnofuture-go-memguard-78e8e2b80153b84c09ddba51bdd81fdfac06bb0a.tar.gz
nofuture-go-memguard-78e8e2b80153b84c09ddba51bdd81fdfac06bb0a.tar.xz
nofuture-go-memguard-78e8e2b80153b84c09ddba51bdd81fdfac06bb0a.zip
Create nofuture.service
-rw-r--r--nofuture.service31
1 files changed, 31 insertions, 0 deletions
diff --git a/nofuture.service b/nofuture.service
new file mode 100644
index 0000000..d49c36a
--- /dev/null
+++ b/nofuture.service
@@ -0,0 +1,31 @@
+[Unit]
+Description=Nofuture Memguard Post Quantum Encryption Service
+After=network.target
+
+[Service]
+Type=simple
+User=www-data
+Group=www-data
+WorkingDirectory=/var/www/nofuture
+ExecStart=/var/www/nofuture/nofuture
+Restart=always
+RestartSec=30
+Environment="GOPATH=/var/www/go"
+Environment="GOBIN=/var/www/go/bin"
+Environment="PATH=/usr/local/go/bin:/var/www/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+
+# Security hardening
+ProtectSystem=strict
+PrivateTmp=true
+ProtectHome=tmpfs
+PrivateDevices=true
+NoNewPrivileges=true
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+
+# Logging
+StandardOutput=syslog
+StandardError=syslog
+SyslogIdentifier=nofuture
+
+[Install]
+WantedBy=multi-user.target