diff options
Diffstat (limited to 'roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2')
| -rw-r--r-- | roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2 | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2 b/roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2 new file mode 100644 index 00000000..d26d1313 --- /dev/null +++ b/roles/elevate/dolmetsch-raspi/templates/dolmetschctld.service.j2 @@ -0,0 +1,17 @@ +[Unit] +Description=dolmetschctl Server + +[Service] +ExecStart=/opt/dolmetschctl/bin/dolmetschctld +CapabilityBoundingSet=CAP_NET_BIND_SERVICE +NoNewPrivileges=yes +PrivateTmp=yes +ProtectSystem=strict +ProtectHome=yes +ProtectKernelTunables=yes +ProtectControlGroups=yes +RestrictRealtime=yes +RestrictAddressFamilies=AF_INET AF_INET6 + +[Install] +WantedBy=multi-user.target |