Commit Diff
Diff:
2c18e9a7f803ff74613354c8912eddd79fa0ed5c
2a52befa56eec493d4179c1568c7e6cd26d9ae23
2a52befa56eec493d4179c1568c7e6cd26d9ae23
Commit:
2a52befa56eec493d4179c1568c7e6cd26d9ae23
Tree:
6fe948de119ea60a3adededf81499844a7ec8ad8
Committer:
Alexander Barton <alex@barton.de>
Date:
Fri Aug 14 17:55:32 2015
UTC
Message:
Update systemd service file
--- contrib/ngircd.service
+++ contrib/ngircd.service
@@ -4,8 +4,19 @@ After=network.target
[Service]
Type=forking
+User=irc
+Group=irc
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=full
+ProtectHome=true
+NoNewPrivileges=true
+RuntimeDirectory=ircd
+RuntimeDirectoryMode=750
ExecStart=/usr/sbin/ngircd
ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-failure
[Install]
WantedBy=multi-user.target