Restricted rw, ro and exec paths. Moved Restart option on top.
This commit is contained in:
parent
3d8601ee51
commit
c61328a37e
@ -4,12 +4,19 @@ After=network-online.target
|
|||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=simple
|
Type=simple
|
||||||
|
Restart=on-failure
|
||||||
User=dwradio
|
User=dwradio
|
||||||
Group=dwradio
|
Group=dwradio
|
||||||
ExecStart=/usr/bin/dwelling-radio -conf /etc/dwelling/radio.yaml
|
ExecStart=/usr/bin/dwelling-radio -conf /etc/dwelling/radio.yaml
|
||||||
|
|
||||||
|
ReadOnlyPaths=/
|
||||||
|
# Set here path to directory where uploads are stored.
|
||||||
|
ReadWritePaths=/srv/upload
|
||||||
|
NoExecPaths=/
|
||||||
|
ExecPaths=/usr/bin/dwelling-radio /usr/lib64
|
||||||
|
|
||||||
LogsDirectory=dwelling-radio
|
LogsDirectory=dwelling-radio
|
||||||
RuntimeDirectory=dwelling-radio
|
RuntimeDirectory=dwelling-radio
|
||||||
Restart=on-failure
|
|
||||||
|
|
||||||
AmbientCapabilities=
|
AmbientCapabilities=
|
||||||
CapabilityBoundingSet=
|
CapabilityBoundingSet=
|
||||||
|
Loading…
Reference in New Issue
Block a user