copr-extras-online/nightscout/nightscout.service

47 lines
848 B
SYSTEMD
Raw Normal View History

2021-02-26 13:39:18 +00:00
[Unit]
Description=Nightscout CGM.
[Service]
2021-04-06 17:50:01 +00:00
WorkingDirectory=/usr/lib/node_modules/nightscout
2021-04-06 18:18:23 +00:00
ExecStart=/usr/bin/node server.js
2021-02-26 13:39:18 +00:00
DynamicUser=yes
EnvironmentFile=/etc/nightscout/nightscout-environ
2021-04-06 18:18:23 +00:00
ReadOnlyPaths=/usr/lib/node_modules/nightscout
2021-02-26 13:39:18 +00:00
Restart=on-failure
PrivateTmp=yes
PrivateDevices=true
PrivateUsers=true
DevicePolicy=closed
ProtectSystem=strict
ProtectHome=tmpfs
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectClock=true
ProtectKernelLogs=yes
ProtectHostname=yes
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
NoNewPrivileges=yes
LockPersonality=yes
2021-04-06 18:18:23 +00:00
#MemoryDenyWriteExecute=yes
2021-02-26 13:39:18 +00:00
CapabilityBoundingSet=
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallErrorNumber=EPERM
[Install]
WantedBy=multi-user.target