diff --git a/conf/bookwyrm-server.service b/conf/bookwyrm-server.service index c0e66d3..a30551b 100644 --- a/conf/bookwyrm-server.service +++ b/conf/bookwyrm-server.service @@ -15,11 +15,11 @@ ProtectSystem=strict ProtectHome=tmpfs InaccessiblePaths=-/media -/mnt -/srv PrivateTmp=yes -#TemporaryFileSystem=/var -PrivateUsers=true +TemporaryFileSystem=/var +#PrivateUsers=true PrivateDevices=true -#BindReadOnlyPaths=__INSTALL_DIR__ -#BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql +BindReadOnlyPaths=__INSTALL_DIR__ +BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql LockPersonality=yes MemoryDenyWriteExecute=true PrivateMounts=true