diff options
Diffstat (limited to 'pkg/zorian.service')
| -rw-r--r-- | pkg/zorian.service | 6 | +4 −2 |
1 files changed, 4 insertions, 2 deletions
diff --git a/pkg/zorian.service b/pkg/zorian.service index ac99e25..64f34b5 100644 --- a/pkg/zorian.service +++ b/pkg/zorian.service @@ -8,11 +8,13 @@ After=time-sync.target network-online.target remote-fs.target nss-lookup.target Wants=time-sync.target [Service] -Type=exec +Type=notify User=zorian Group=zorian Restart=always RestartSec=30 +WatchdogSec=30 +NotifyAccess=main ExecPaths=/usr/local/bin/zorian /usr/lib ExecStart=/usr/local/bin/zorian --config=/etc/zorian.toml LimitCORE=infinity @@ -25,6 +27,7 @@ StateDirectory=%p CacheDirectory=%p RuntimeDirectory=%p +UMask=0077 LockPersonality=yes NoNewPrivileges=yes PrivateDevices=yes @@ -42,7 +45,6 @@ ProtectSystem=strict RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX RestrictNamespaces=yes RestrictSUIDSGID=yes -UMask=0077 [Install] # service should not start from the rescue shell (rescue.target). |