plantuml-server/trunk/plantuml-server.service

   1 [Unit]
   2 Description=PlantUML Online Server
   3
   4 [Service]
   5 DynamicUser=yes
   6 EnvironmentFile=/etc/conf.d/plantuml-server
   7 ExecStart=/usr/bin/plantuml-server
   8 Restart=on-failure
   9 RestartSec=5s
  10 Type=simple
  11 CapabilityBoundingSet=
  12 AmbientCapabilities=
  13 NoNewPrivileges=true
  14 #SecureBits=
  15 ProtectSystem=strict
  16 ProtectHome=true
  17 PrivateTmp=true
  18 PrivateDevices=true
  19 PrivateNetwork=false
  20 PrivateUsers=true
  21 ProtectHostname=true
  22 ProtectClock=true
  23 ProtectKernelTunables=true
  24 ProtectKernelModules=true
  25 ProtectKernelLogs=true
  26 ProtectControlGroups=true
  27 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
  28 RestrictNamespaces=true
  29 LockPersonality=true
  30 RestrictRealtime=true
  31 RestrictSUIDSGID=true
  32 SystemCallFilter=@system-service
  33 SystemCallArchitectures=native
  34
  35 [Install]
  36 WantedBy=multi-user.target