YunoHost-Apps/kresus_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/kresus_ynh.git synced 2024-09-03 19:36:10 +02:00
Code Issues Activity Actions

strenghen systemd security, thanks archlinux

Browse source
This commit is contained in:
Jibec 2018-09-06 13:47:45 +02:00 • committed by Jean-Baptiste Holcroft
parent b780476d9d
commit 0ce4979d50
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
conf/systemd.service
View file

@ -13,6 +13,14 @@ Environment=NODE_ENV=production
Environment=HOME=__NODEPATH__
ExecStart=__FINALPATH__/bin/kresus.js --config __FINALPATH__/config.ini
Restart=always
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=strict
ProtectControlGroups=yes
ProtectKernelModules=yes
ReadWritePaths=__FINALPATH__/config.ini __FINALPATH__/data/
StandardOutput=syslog
StandardError=syslog