about summary refs log tree commit diff
diff options
context:
space:
mode:
authorAlexander Barton <alex@barton.de>2015-08-14 19:55:32 +0200
committerAlexander Barton <alex@barton.de>2015-08-14 19:55:32 +0200
commit2a52befa56eec493d4179c1568c7e6cd26d9ae23 (patch)
tree6fe948de119ea60a3adededf81499844a7ec8ad8
parent2c18e9a7f803ff74613354c8912eddd79fa0ed5c (diff)
downloadngircd-2a52befa56eec493d4179c1568c7e6cd26d9ae23.tar.gz
ngircd-2a52befa56eec493d4179c1568c7e6cd26d9ae23.zip
Update systemd service file
-rw-r--r--contrib/ngircd.service11
1 files changed, 11 insertions, 0 deletions
diff --git a/contrib/ngircd.service b/contrib/ngircd.service
index b71eef2b..f24ef60c 100644
--- a/contrib/ngircd.service
+++ b/contrib/ngircd.service
@@ -4,8 +4,19 @@ After=network.target
 
 [Service]
 Type=forking
+User=irc
+Group=irc
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=full
+ProtectHome=true
+NoNewPrivileges=true
+RuntimeDirectory=ircd
+RuntimeDirectoryMode=750
 ExecStart=/usr/sbin/ngircd
 ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-failure
 
 [Install]
 WantedBy=multi-user.target