radicale/repos/community-any/radicale.service

   1 [Unit]
   2 Description=radicale - A simple CalDAV (calendar) and CardDAV (contact) server
   3 After=syslog.target network.target
   4 Requires=network.target
   5
   6 [Service]
   7 CapabilityBoundingSet=CAP_NET_BIND_SERVICE
   8 ExecStart=/usr/bin/radicale
   9 Group=radicale
  10 IPAccounting=true
  11 LockPersonality=true
  12 MemoryDenyWriteExecute=true
  13 NoNewPrivileges=yes
  14 PrivateDevices=yes
  15 PrivateTmp=yes
  16 PrivateUsers=yes
  17 ProtectClock=true
  18 ProtectControlGroups=true
  19 ProtectHome=true
  20 ProtectHostname=true
  21 ProtectKernelLogs=true
  22 ProtectKernelModules=true
  23 ProtectKernelTunables=true
  24 ProtectProc=invisible
  25 ProtectSystem=strict
  26 RemoveIPC=true
  27 Restart=on-failure
  28 RestrictAddressFamilies=~AF_PACKET AF_NETLINK AF_UNIX
  29 RestrictNamespaces=true
  30 RestrictRealtime=true
  31 RestrictSUIDSGID=true
  32 StateDirectory=radicale
  33 SystemCallArchitectures=native
  34 SystemCallErrorNumber=EPERM
  35 SystemCallFilter=@system-service
  36 SystemCallFilter=~@resources
  37 UMask=0027
  38 User=radicale
  39
  40 [Install]
  41 WantedBy=multi-user.target