diff options
| author | Gab <24553253+gabrix73@users.noreply.github.com> | 2025-06-10 12:00:00 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-06-10 12:00:00 +0200 |
| commit | 12edaac0b7c59e506df15d73393d531fdcc12e91 (patch) | |
| tree | 6e90617c74aecd2762743269ef9c7b6165423c57 | |
| parent | 0e26318f3674759c735b4bf5f8fbdac9c68ecb9a (diff) | |
| download | onion-newsreader-12edaac0b7c59e506df15d73393d531fdcc12e91.tar.gz onion-newsreader-12edaac0b7c59e506df15d73393d531fdcc12e91.tar.xz onion-newsreader-12edaac0b7c59e506df15d73393d531fdcc12e91.zip | |
Update onion-newsreader.service
| -rw-r--r-- | onion-newsreader.service | 49 |
1 files changed, 0 insertions, 49 deletions
diff --git a/onion-newsreader.service b/onion-newsreader.service index c35cc2f..c1e4f23 100644 --- a/onion-newsreader.service +++ b/onion-newsreader.service @@ -43,52 +43,3 @@ SyslogIdentifier=onion-newsreader [Install] WantedBy=multi-user.target -mct8:/opt/onion-newsreader/src# nano /etc/systemd/system/onion-newsreader.service -mct8:/opt/onion-newsreader/src# systemctl daemon-reload -mct8:/opt/onion-newsreader/src# nano /etc/systemd/system/onion-newsreader.service -mct8:/opt/onion-newsreader/src# cat /etc/systemd/system/onion-newsreader.service -[Unit] -Description=Onion Newsreader Anonymous NNTP Client -After=network.target tor.service -Wants=tor.service -Documentation=https://github.com/gabrix73/onion-newsreader.git - -[Service] -Type=simple -User=newsreader -Group=newsreader -WorkingDirectory=/opt/onion-newsreader -ExecStart=/opt/onion-newsreader/bin/onion-newsreader -ExecReload=/bin/kill -HUP $MAINPID -EnvironmentFile=/etc/onion-newsreader/environment - -# Security -NoNewPrivileges=true -PrivateTmp=true -ProtectSystem=strict -ProtectHome=true -ReadWritePaths=/opt/onion-newsreader /var/log/onion-newsreader -ProtectKernelTunables=true -ProtectKernelModules=true -ProtectControlGroups=true -RestrictSUIDSGID=true -RestrictRealtime=true -RestrictNamespaces=true -LockPersonality=true -MemoryDenyWriteExecute=true -SystemCallFilter=@system-service -SystemCallErrorNumber=EPERM - -# Restart policy -Restart=always -RestartSec=10 -StartLimitInterval=60 -StartLimitBurst=3 - -# Logging -StandardOutput=journal -StandardError=journal -SyslogIdentifier=onion-newsreader - -[Install] -WantedBy=multi-user.target |