copr-extras-online/nightscout/nightscout.service

44 lines
782 B
SYSTEMD
Raw Normal View History

2021-02-26 13:39:18 +00:00
[Unit]
Description=Nightscout CGM.
[Service]
Execstart=/usr/bin/node /usr/lib/node_modules/nightscout/server.js
DynamicUser=yes
EnvironmentFile=/etc/nightscout/nightscout-environ
Restart=on-failure
PrivateTmp=yes
PrivateDevices=true
PrivateUsers=true
DevicePolicy=closed
ProtectSystem=strict
ProtectHome=tmpfs
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectClock=true
ProtectKernelLogs=yes
ProtectHostname=yes
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
NoNewPrivileges=yes
LockPersonality=yes
MemoryDenyWriteExecute=yes
CapabilityBoundingSet=
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallErrorNumber=EPERM
[Install]
WantedBy=multi-user.target