summaryrefslogtreecommitdiff
path: root/roles/streaming/dolmetsch-raspi/templates/dolmetschctld.service.j2
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2021-07-30 21:54:12 +0200
committerChristian Pointner <equinox@spreadspace.org>2021-07-30 21:54:12 +0200
commite578f4538dad9aa7cd977094e58293e847990d30 (patch)
treee69f9edd2fe8d312e0ee4d0f7fb3adda35d88d7e /roles/streaming/dolmetsch-raspi/templates/dolmetschctld.service.j2
parentmove some legacy stuff to graveyard (diff)
move dolmetsch-raspi to generic folder
Diffstat (limited to 'roles/streaming/dolmetsch-raspi/templates/dolmetschctld.service.j2')
-rw-r--r--roles/streaming/dolmetsch-raspi/templates/dolmetschctld.service.j221
1 files changed, 21 insertions, 0 deletions
diff --git a/roles/streaming/dolmetsch-raspi/templates/dolmetschctld.service.j2 b/roles/streaming/dolmetsch-raspi/templates/dolmetschctld.service.j2
new file mode 100644
index 00000000..c8c9ca79
--- /dev/null
+++ b/roles/streaming/dolmetsch-raspi/templates/dolmetschctld.service.j2
@@ -0,0 +1,21 @@
+[Unit]
+Description=dolmetschctl Server
+
+[Service]
+ExecStart=/opt/dolmetschctl/bin/dolmetschctld
+Restart=always
+RestartSecs=1s
+StartLimitBurst=10
+StartLimitIntervalSec=5s
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+RestrictRealtime=yes
+RestrictAddressFamilies=AF_INET AF_INET6
+
+[Install]
+WantedBy=multi-user.target