#8 Add Jenkins jobs
#9 Add systemd user service Add deployment script and systemd service file
This commit is contained in:
30
tools/template-nbscloud.service
Normal file
30
tools/template-nbscloud.service
Normal file
@@ -0,0 +1,30 @@
|
||||
[unit]
|
||||
Description=NoBullShit-cloud - A personal cloud without bullshit
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
DynamicUser=true
|
||||
|
||||
# Values substituted from application.properties
|
||||
User=USER_R
|
||||
Group=USER_R
|
||||
ExecStart=java -jar DEPLOY_PATH_R/nbscloud.jar
|
||||
ReadWritePaths=BASE_DIR_R
|
||||
|
||||
# Hardening
|
||||
CapabilityBoundingSet=
|
||||
AmbientCapabilities=
|
||||
NoNewPrivileges=true
|
||||
ProtectHome=true
|
||||
ProtectSystem=full
|
||||
PrivateDevices=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectKernelModules=true
|
||||
ProtectControlGroups=true
|
||||
PrivateTmp=true
|
||||
LockPersonality=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Reference in New Issue
Block a user