From 7ec613f0f42fd6083adfa1eff340b3899475e8f6 Mon Sep 17 00:00:00 2001
From: MK13 <marius@kleberonline.de>
Date: Sun, 8 May 2022 22:27:06 +0200
Subject: [PATCH] #9 Add systemd user service

Fix service file, because the hardening does not make that much sense as it is run as --user anyway
---
 tools/template-nbscloud.service | 13 +------------
 1 file changed, 1 insertion(+), 12 deletions(-)

diff --git a/tools/template-nbscloud.service b/tools/template-nbscloud.service
index c89d75f..60dbee5 100644
--- a/tools/template-nbscloud.service
+++ b/tools/template-nbscloud.service
@@ -1,30 +1,19 @@
-[unit]
+[Unit]
 Description=NoBullShit-cloud - A personal cloud without bullshit
 After=network-online.target
 Wants=network-online.target
 
 [Service]
 Type=simple
-DynamicUser=true
 
 # Values substituted from application.properties
-User=USER_R
-Group=USER_R
 ExecStart=java -jar DEPLOY_PATH_R/nbscloud.jar
 ReadWritePaths=BASE_DIR_R
 
 # Hardening
-CapabilityBoundingSet=
-AmbientCapabilities=
-NoNewPrivileges=true
 ProtectHome=true
 ProtectSystem=full
-PrivateDevices=true
-ProtectKernelTunables=true
-ProtectKernelModules=true
-ProtectControlGroups=true
 PrivateTmp=true
-LockPersonality=true
 
 [Install]
 WantedBy=multi-user.target
\ No newline at end of file