2018-04-17 00:02:25 +02:00
|
|
|
[Unit]
|
|
|
|
|
Description=Funkwhale (__APP__) application server
|
|
|
|
|
After=redis.service postgresql.service
|
|
|
|
|
PartOf=__APP__.target
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
User=__APP__
|
2018-10-21 11:15:08 +02:00
|
|
|
Group=__APP__
|
2018-10-21 10:59:28 +02:00
|
|
|
WorkingDirectory=__FINALPATH__/code/api
|
|
|
|
|
EnvironmentFile=__FINALPATH__/code/config/.env
|
|
|
|
|
ExecStart=__FINALPATH__/code/virtualenv/bin/daphne -b ${FUNKWHALE_API_IP} -p ${FUNKWHALE_API_PORT} config.asgi:application --proxy-headers
|
2018-04-17 00:02:25 +02:00
|
|
|
|
2018-10-21 11:15:08 +02:00
|
|
|
NoNewPrivileges=true
|
|
|
|
|
PrivateDevices=true
|
|
|
|
|
PrivateTmp=true
|
|
|
|
|
ProtectHome=true
|
|
|
|
|
ProtectSystem=strict
|
|
|
|
|
ProtectControlGroups=yes
|
|
|
|
|
ProtectKernelModules=yes
|
|
|
|
|
ReadOnlyPaths=__FINALPATH__/code/config/.env __FINALPATH__/code/
|
|
|
|
|
ReadWritePaths=__FINALPATH__/media __FINALPATH__/import
|
|
|
|
|
|
|
|
|
|
StandardOutput=syslog
|
|
|
|
|
StandardError=syslog
|
|
|
|
|
SyslogIdentifier=__APP__-server
|
|
|
|
|
|
2018-04-17 00:02:25 +02:00
|
|
|
[Install]
|
2018-10-21 11:15:08 +02:00
|
|
|
WantedBy=multi-user.target
|
