From 12edaac0b7c59e506df15d73393d531fdcc12e91 Mon Sep 17 00:00:00 2001 From: Gab <24553253+gabrix73@users.noreply.github.com> Date: Tue, 10 Jun 2025 12:00:00 +0200 Subject: Update onion-newsreader.service --- onion-newsreader.service | 49 ------------------------------------------------ 1 file changed, 49 deletions(-) diff --git a/onion-newsreader.service b/onion-newsreader.service index c35cc2f..c1e4f23 100644 --- a/onion-newsreader.service +++ b/onion-newsreader.service @@ -43,52 +43,3 @@ SyslogIdentifier=onion-newsreader [Install] WantedBy=multi-user.target -mct8:/opt/onion-newsreader/src# nano /etc/systemd/system/onion-newsreader.service -mct8:/opt/onion-newsreader/src# systemctl daemon-reload -mct8:/opt/onion-newsreader/src# nano /etc/systemd/system/onion-newsreader.service -mct8:/opt/onion-newsreader/src# cat /etc/systemd/system/onion-newsreader.service -[Unit] -Description=Onion Newsreader Anonymous NNTP Client -After=network.target tor.service -Wants=tor.service -Documentation=https://github.com/gabrix73/onion-newsreader.git - -[Service] -Type=simple -User=newsreader -Group=newsreader -WorkingDirectory=/opt/onion-newsreader -ExecStart=/opt/onion-newsreader/bin/onion-newsreader -ExecReload=/bin/kill -HUP $MAINPID -EnvironmentFile=/etc/onion-newsreader/environment - -# Security -NoNewPrivileges=true -PrivateTmp=true -ProtectSystem=strict -ProtectHome=true -ReadWritePaths=/opt/onion-newsreader /var/log/onion-newsreader -ProtectKernelTunables=true -ProtectKernelModules=true -ProtectControlGroups=true -RestrictSUIDSGID=true -RestrictRealtime=true -RestrictNamespaces=true -LockPersonality=true -MemoryDenyWriteExecute=true -SystemCallFilter=@system-service -SystemCallErrorNumber=EPERM - -# Restart policy -Restart=always -RestartSec=10 -StartLimitInterval=60 -StartLimitBurst=3 - -# Logging -StandardOutput=journal -StandardError=journal -SyslogIdentifier=onion-newsreader - -[Install] -WantedBy=multi-user.target -- cgit v1.2.3