1 files changed, 35 insertions, 0 deletions
diff --git a/deploy/yamn-nym-sender.service b/deploy/yamn-nym-sender.service
new file mode 100644
index 0000000..bd7120e
--- /dev/null
+++ b/deploy/yamn-nym-sender.service
@@ -0,0 +1,35 @@
+[Unit]
+Description=YAMN persistent Nym sender
+Documentation=https://docs.rs/nym-sdk/latest/nym_sdk/
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=www-data
+Group=www-data
+EnvironmentFile=/etc/yamnweb/yamnweb.env
+ExecStart=/usr/local/bin/yamn-nym-submit --daemon
+Restart=on-failure
+RestartSec=10s
+TimeoutStopSec=250s
+RuntimeDirectory=yamnweb
+RuntimeDirectoryMode=0700
+UMask=0077
+NoNewPrivileges=true
+PrivateTmp=true
+PrivateDevices=true
+ProtectHome=true
+ProtectSystem=strict
+ReadWritePaths=/var/lib/yamnweb/nym-client /run/yamnweb
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+RestrictSUIDSGID=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+CapabilityBoundingSet=
+AmbientCapabilities=
+StandardOutput=null
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target