YunoHost-Apps/bookwyrm_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/bookwyrm_ynh.git synced 2024-09-03 18:16:12 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update bookwyrm-server.service

Browse source
This commit is contained in:
Thomas 2023-11-10 09:04:13 +01:00 • committed by GitHub
parent d946ee4079
commit d692e80558
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
conf/bookwyrm-server.service
View file

@ -1,4 +1,3 @@
[Unit]
Description=__APP__ application server
After=network.target postgresql.service redis.service
@ -19,7 +18,7 @@ TemporaryFileSystem=/var /run
#PrivateUsers=true
PrivateDevices=true
BindReadOnlyPaths=__INSTALL_DIR__
#BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
LockPersonality=yes
MemoryDenyWriteExecute=true
PrivateMounts=true
@ -37,7 +36,7 @@ RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
DevicePolicy=closed
ProtectProc=invisible
SystemCallArchitectures=native
SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged
#SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged
# Denying access to capabilities that should not be relevant for webapps
# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html