added hardening and limit restarts
This commit is contained in:
@@ -2,14 +2,19 @@
|
|||||||
Description=Sparse caching arch linux mirror
|
Description=Sparse caching arch linux mirror
|
||||||
After=network-online.target
|
After=network-online.target
|
||||||
Wants=network-online.target
|
Wants=network-online.target
|
||||||
|
StartLimitInterval=300
|
||||||
|
StartLimitBurst=5
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
Type=simple
|
Type=simple
|
||||||
ExecStart=/usr/local/bin/pkgstash
|
ExecStart=/usr/local/bin/pkgstash --config /etd/pkgstash/pkgstash.toml
|
||||||
User=pkgstash
|
User=pkgstash
|
||||||
Group=pkgstash
|
Group=pkgstash
|
||||||
Restart=on-failure
|
Restart=on-failure
|
||||||
RestartSec=5s
|
RestartSec=5s
|
||||||
|
NoNewPrivileges=true
|
||||||
|
ProtectSystem=strict
|
||||||
|
ReadWritePaths=/srv/pkgstash
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
|
|||||||
Reference in New Issue
Block a user