diff options
Diffstat (limited to 'net-im/conduit/files/matrix-conduit.service')
| -rw-r--r-- | net-im/conduit/files/matrix-conduit.service | 50 |
1 files changed, 50 insertions, 0 deletions
diff --git a/net-im/conduit/files/matrix-conduit.service b/net-im/conduit/files/matrix-conduit.service new file mode 100644 index 0000000..7643095 --- /dev/null +++ b/net-im/conduit/files/matrix-conduit.service @@ -0,0 +1,50 @@ +# Based on debian/matrix-conduit.service from Conduit -*- conf -*- +# Modified by Arsen +[Unit] +Description=Conduit Matrix homeserver +After=network.target +ConditionPathExists=/etc/matrix-conduit/conduit.toml + +[Service] +DynamicUser=yes +User=conduit +Group=conduit +Type=simple + +AmbientCapabilities= +CapabilityBoundingSet= +LockPersonality=yes +MemoryDenyWriteExecute=yes +NoNewPrivileges=yes +ProtectClock=yes +ProtectControlGroups=yes +ProtectHome=yes +ProtectHostname=yes +ProtectKernelLogs=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +ProtectSystem=strict +PrivateDevices=yes +PrivateMounts=yes +PrivateTmp=yes +PrivateUsers=yes +RemoveIPC=yes +RestrictAddressFamilies=AF_INET AF_INET6 +RestrictNamespaces=yes +RestrictRealtime=yes +RestrictSUIDSGID=yes +SystemCallArchitectures=native +SystemCallFilter=@system-service +SystemCallErrorNumber=EPERM +StateDirectory=matrix-conduit + +Environment="CONDUIT_CONFIG=/etc/matrix-conduit/conduit.toml" + +ExecStart=/usr/sbin/conduit +Restart=on-failure +RestartSec=10 +StartLimitInterval=1m +StartLimitBurst=5 + +[Install] +WantedBy=multi-user.target |