PKGBUILDs/community/gitea/gitea.service

47 lines
1,022 B
SYSTEMD
Raw Normal View History

2019-08-03 00:34:22 +00:00
[Unit]
Description=Gitea (Git with a cup of tea)
After=syslog.target
After=network.target
After=mysqld.service
After=postgresql.service
After=memcached.service
After=redis.service
[Service]
User=gitea
Group=gitea
Type=simple
WorkingDirectory=~
RuntimeDirectory=gitea
LogsDirectory=gitea
StateDirectory=gitea
Environment=USER=gitea HOME=/var/lib/gitea GITEA_WORK_DIR=/var/lib/gitea
ExecStart=/usr/bin/gitea web -c /etc/gitea/app.ini
Restart=always
RestartSec=2s
CapabilityBoundingSet=
NoNewPrivileges=True
2020-07-30 01:18:24 +00:00
#SecureBits=noroot-locked
2019-08-03 00:34:22 +00:00
ProtectSystem=strict
2020-07-30 01:18:24 +00:00
ProtectHome=true
2019-08-03 00:34:22 +00:00
ReadWritePaths=/etc/gitea/app.ini
2020-07-30 01:18:24 +00:00
PrivateTmp=true
PrivateDevices=true
PrivateUsers=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
2019-08-03 00:34:22 +00:00
LockPersonality=true
MemoryDenyWriteExecute=true
RestrictRealtime=true
2020-07-30 01:18:24 +00:00
RestrictSUIDSGID=true
2019-08-03 00:34:22 +00:00
SystemCallArchitectures=native
SystemCallFilter=@system-service
2020-09-13 18:18:45 +00:00
SystemCallErrorNumber=EPERM
2019-08-03 00:34:22 +00:00
[Install]
WantedBy=multi-user.target