added hardening and limit restarts

This commit is contained in:
2026-05-07 10:57:19 -06:00
parent 5eafd202af
commit 00c0987529
+6 -1
View File
@@ -2,14 +2,19 @@
Description=Sparse caching arch linux mirror Description=Sparse caching arch linux mirror
After=network-online.target After=network-online.target
Wants=network-online.target Wants=network-online.target
StartLimitInterval=300
StartLimitBurst=5
[Service] [Service]
Type=simple Type=simple
ExecStart=/usr/local/bin/pkgstash ExecStart=/usr/local/bin/pkgstash --config /etd/pkgstash/pkgstash.toml
User=pkgstash User=pkgstash
Group=pkgstash Group=pkgstash
Restart=on-failure Restart=on-failure
RestartSec=5s RestartSec=5s
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/srv/pkgstash
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target