Generally functional. Added upload script
This commit is contained in:
41
superball-thrower.service
Normal file
41
superball-thrower.service
Normal file
@@ -0,0 +1,41 @@
|
||||
[Unit]
|
||||
Description=Superball Thrower Daemon (C Implementation)
|
||||
Documentation=https://git.laantungir.net/laantungir/super_ball_thrower
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=superball-thrower
|
||||
Group=superball-thrower
|
||||
WorkingDirectory=/usr/local/bin/super_ball_thrower
|
||||
ExecStart=/usr/local/bin/super_ball_thrower/superball_thrower /usr/local/bin/super_ball_thrower/config.json
|
||||
Restart=always
|
||||
RestartSec=10
|
||||
StandardOutput=journal
|
||||
StandardError=journal
|
||||
SyslogIdentifier=superball-thrower
|
||||
Environment="LD_LIBRARY_PATH=/usr/local/lib:/usr/lib/x86_64-linux-gnu"
|
||||
|
||||
# Security settings
|
||||
NoNewPrivileges=true
|
||||
PrivateTmp=true
|
||||
ProtectSystem=strict
|
||||
ProtectHome=true
|
||||
ReadWritePaths=/var/log/superball-thrower /usr/local/bin/super_ball_thrower
|
||||
ProtectKernelTunables=true
|
||||
ProtectKernelModules=true
|
||||
ProtectControlGroups=true
|
||||
RestrictRealtime=true
|
||||
RestrictSUIDSGID=true
|
||||
LockPersonality=true
|
||||
RestrictNamespaces=true
|
||||
SystemCallFilter=@system-service
|
||||
SystemCallErrorNumber=EPERM
|
||||
|
||||
# Resource limits
|
||||
LimitNOFILE=65536
|
||||
LimitNPROC=4096
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Reference in New Issue
Block a user