1
0

#9 Add systemd user service

Fix service file, because the hardening does not make that much sense as it is run as --user anyway
This commit is contained in:
2022-05-08 22:27:06 +02:00
parent 2435670c3f
commit 7ec613f0f4

View File

@@ -1,30 +1,19 @@
[unit]
[Unit]
Description=NoBullShit-cloud - A personal cloud without bullshit
After=network-online.target
Wants=network-online.target
[Service]
Type=simple
DynamicUser=true
# Values substituted from application.properties
User=USER_R
Group=USER_R
ExecStart=java -jar DEPLOY_PATH_R/nbscloud.jar
ReadWritePaths=BASE_DIR_R
# Hardening
CapabilityBoundingSet=
AmbientCapabilities=
NoNewPrivileges=true
ProtectHome=true
ProtectSystem=full
PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
PrivateTmp=true
LockPersonality=true
[Install]
WantedBy=multi-user.target