copr-extras-online/gitea/gitea.service

59 lines
921 B
SYSTEMD
Raw Normal View History

2021-02-26 11:06:16 +00:00
[Unit]
Description=Gitea git hosting.
2021-02-26 12:07:11 +00:00
After=mariadb.service
2021-02-26 11:06:16 +00:00
[Service]
2021-04-28 13:25:11 +00:00
ExecStart=/usr/bin/gitea web
2021-02-26 11:06:16 +00:00
User=git
Group=git
2021-02-26 12:07:11 +00:00
PIDFile=/run/gitea/gitea.pid
PrivateDevices=yes
MemoryMax=1G
MemoryHigh=750M
MemorySwapMax=1G
CPUWeight=50
ConfigurationDirectory=gitea
2021-02-26 11:06:16 +00:00
RuntimeDirectory=gitea
StateDirectory=gitea
2021-02-26 12:07:11 +00:00
Restart=always
2021-02-26 11:06:16 +00:00
2021-02-26 12:07:11 +00:00
PrivateTmp=yes
PrivateDevices=true
PrivateUsers=true
DevicePolicy=closed
ProtectSystem=strict
ProtectHome=tmpfs
BindPaths=/home/git
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectClock=true
ProtectKernelLogs=yes
ProtectHostname=yes
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
NoNewPrivileges=yes
LockPersonality=yes
MemoryDenyWriteExecute=yes
CapabilityBoundingSet=
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallErrorNumber=EPERM
2021-02-26 11:06:16 +00:00
[Install]
WantedBy=multi-user.target