1 74f021fb 2017-01-06 alex # ngIRCd systemd service unit.
 2 74f021fb 2017-01-06 alex # See systemd(1), systemd.unit(5), systemd.service(5), systemd.exec(5).
 3 74f021fb 2017-01-06 alex 
 4 160f7285 2012-08-18 alex [Unit]
 5 160f7285 2012-08-18 alex Description=Next Generation IRC Daemon
 6 f0532c98 2017-01-05 alex Documentation=man:ngircd(8) man:ngircd.conf(5) https://ngircd.barton.de
 7 160f7285 2012-08-18 alex After=network.target
 8 74f021fb 2017-01-06 alex Wants=anope.service atheme.service irc-services.service
 9 74f021fb 2017-01-06 alex Wants=bopm.service
10 74f021fb 2017-01-06 alex Before=anope.service atheme.service irc-services.service
11 74f021fb 2017-01-06 alex Before=bopm.service
12 160f7285 2012-08-18 alex 
13 160f7285 2012-08-18 alex [Service]
14 3d49e8ac 2013-01-22 alex Type=forking
15 2a52befa 2015-08-14 alex User=irc
16 2a52befa 2015-08-14 alex Group=irc
17 74f021fb 2017-01-06 alex # Settings & limits:
18 f0532c98 2017-01-05 alex CapabilityBoundingSet=CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
19 74f021fb 2017-01-06 alex MemoryDenyWriteExecute=yes
20 74f021fb 2017-01-06 alex NoNewPrivileges=yes
21 2a52befa 2015-08-14 alex PrivateDevices=yes
22 74f021fb 2017-01-06 alex PrivateTmp=yes
23 74f021fb 2017-01-06 alex ProtectControlGroups=yes
24 74f021fb 2017-01-06 alex ProtectHome=yes
25 74f021fb 2017-01-06 alex ProtectKernelModules=yes
26 74f021fb 2017-01-06 alex ProtectKernelTunables=yes
27 2a52befa 2015-08-14 alex ProtectSystem=full
28 74f021fb 2017-01-06 alex RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
29 74f021fb 2017-01-06 alex RestrictRealtime=yes
30 2a52befa 2015-08-14 alex RuntimeDirectory=ircd
31 2a52befa 2015-08-14 alex RuntimeDirectoryMode=750
32 74f021fb 2017-01-06 alex # Try to load "default files" from any Debian package variant to keep this
33 74f021fb 2017-01-06 alex # unit generic.
34 f0532c98 2017-01-05 alex EnvironmentFile=-/etc/default/ngircd
35 f0532c98 2017-01-05 alex EnvironmentFile=-/etc/default/ngircd-full
36 f0532c98 2017-01-05 alex EnvironmentFile=-/etc/default/ngircd-full-dbg
37 74f021fb 2017-01-06 alex # Start ngIRCd. Note: systemd doesn't allow to use $DAEMON here!
38 f0532c98 2017-01-05 alex ExecStart=/usr/sbin/ngircd $PARAMS
39 160f7285 2012-08-18 alex ExecReload=/bin/kill -HUP $MAINPID
40 2a52befa 2015-08-14 alex Restart=on-failure
41 160f7285 2012-08-18 alex 
42 160f7285 2012-08-18 alex [Install]
43 160f7285 2012-08-18 alex WantedBy=multi-user.target