blob: 8e51a03d569b8a36457bbc97f27346462e5b1820 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
[Unit]
Description=YAMN Nym ingress
Documentation=https://docs.rs/nym-sdk/latest/nym_sdk/
Wants=network-online.target
After=network-online.target tor.service
[Service]
Type=simple
User=yamn-ingress
Group=yamn-ingress
EnvironmentFile=/etc/yamnweb/yamn-nym-ingress.env
ExecStart=/usr/local/bin/yamn-nym-ingress
Restart=on-failure
RestartSec=10s
NoNewPrivileges=true
PrivateTmp=true
PrivateDevices=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths=/var/lib/yamnweb/nym-ingress
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
RestrictSUIDSGID=true
LockPersonality=true
MemoryDenyWriteExecute=true
CapabilityBoundingSet=
AmbientCapabilities=
StandardOutput=journal
StandardError=journal
[Install]
WantedBy=multi-user.target
|
