matterbridge/trunk/matterbridge.service

   1 [Unit]
   2 Description=Multi-protocols bridge for online communications
   3 After=network-online.target
   4
   5 [Service]
   6 User=matterbridge
   7 DynamicUser=yes
   8 StateDirectory=matterbridge
   9 ExecStartPre=+/usr/bin/install --owner=matterbridge --mode=400 -T /etc/matterbridge.toml %S/matterbridge/matterbridge.toml
  10 ExecStart=/usr/bin/matterbridge -conf %S/matterbridge/matterbridge.toml
  11 Restart=on-failure
  12 RestartSec=5s
  13 Type=simple
  14 CapabilityBoundingSet=
  15 AmbientCapabilities=
  16 NoNewPrivileges=true
  17 #SecureBits=
  18 ProtectSystem=strict
  19 ProtectHome=true
  20 PrivateTmp=true
  21 PrivateDevices=true
  22 PrivateNetwork=false
  23 PrivateUsers=true
  24 ProtectHostname=true
  25 ProtectClock=true
  26 ProtectKernelTunables=true
  27 ProtectKernelModules=true
  28 ProtectKernelLogs=true
  29 ProtectControlGroups=true
  30 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
  31 RestrictNamespaces=true
  32 LockPersonality=true
  33 RestrictRealtime=true
  34 RestrictSUIDSGID=true
  35 SystemCallFilter=@system-service
  36 SystemCallArchitectures=native
  37
  38 [Install]
  39 WantedBy=multi-user.target