devzat-github/devzat-github.service at main · THarrisonDev/devzat-github · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
[Unit]
Description=Devzat GitHub plugin
Documentation=https://github.com/quackduck/devzat
After=network-online.target devzat.service
Wants=network-online.target devzat.service

[Service]
Type=simple
User=devzat
Group=devzat
EnvironmentFile=/etc/devzat-github.env
ExecStart=/usr/local/bin/devzat-github localhost:5556
Restart=on-failure
RestartSec=5

# Hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectControlGroups=true
RestrictSUIDSGID=true
RestrictAddressFamilies=AF_INET AF_INET6
ProtectProc=invisible
ProcSubset=pid
LockPersonality=true

[Install]
WantedBy=multi-user.target