git.squeep.com Git - akkoma/blob - installation/pleroma.service

   1 [Unit]
   2 Description=Pleroma social network
   3 After=network.target postgresql.service
   4
   5 [Service]
   6 User=pleroma
   7 WorkingDirectory=/home/pleroma/pleroma
   8 Environment="HOME=/home/pleroma"
   9 ExecStart=/usr/local/bin/mix phx.server
  10 ExecReload=/bin/kill $MAINPID
  11 KillMode=process
  12 Restart=on-failure
  13
  14 ; Some security directives.
  15 ; Use private /tmp and /var/tmp folders inside a new file system namespace, which are discarded after the process stops.
  16 PrivateTmp=true
  17 ; Mount /usr, /boot, and /etc as read-only for processes invoked by this service.
  18 ProtectSystem=full
  19 ; Sets up a new /dev mount for the process and only adds API pseudo devices like /dev/null, /dev/zero or /dev/random but not physical devices. Disabled by default because it may not work on devices like the Raspberry Pi.
  20 PrivateDevices=false
  21 ; Ensures that the service process and all its children can never gain new privileges through execve().
  22 NoNewPrivileges=true
  23
  24 [Install]
  25 WantedBy=multi-user.target