J. King
5 months ago
5 changed files with 70 additions and 1 deletions
@ -0,0 +1,37 @@ |
|||||
|
[Unit] |
||||
|
Description=The Arsse newsfeed fetching service |
||||
|
Documentation=https://thearsse.com/manual/ |
||||
|
PartOf=arsse.service |
||||
|
|
||||
|
[Install] |
||||
|
WantedBy=multi-user.target |
||||
|
|
||||
|
[Service] |
||||
|
User=arsse |
||||
|
Group=arsse |
||||
|
Type=simple |
||||
|
WorkingDirectory=/usr/share/webapps/arsse |
||||
|
EnvironmentFile=/etc/webapps/arsse/systemd-environment |
||||
|
ExecStart=/usr/bin/arsse daemon |
||||
|
|
||||
|
ProtectProc=invisible |
||||
|
NoNewPrivileges=true |
||||
|
ProtectSystem=full |
||||
|
ProtectHome=true |
||||
|
StateDirectory=arsse |
||||
|
ConfigurationDirectory=arsse |
||||
|
PrivateTmp=true |
||||
|
PrivateDevices=true |
||||
|
RestrictSUIDSGID=true |
||||
|
StandardOutput=journal |
||||
|
StandardError=journal |
||||
|
SyslogIdentifier=arsse |
||||
|
Restart=on-failure |
||||
|
RestartPreventStatus= |
||||
|
|
||||
|
# These directives can be used for extra security, but are disabled for now for compatibility |
||||
|
|
||||
|
#ReadOnlyPaths=/ |
||||
|
#ReadWriePaths=/var/lib/arsse |
||||
|
#NoExecPaths=/ |
||||
|
#ExecPaths=/usr/bin/php |
@ -0,0 +1,13 @@ |
|||||
|
[Unit] |
||||
|
Description=The Arsse newsfeed management service |
||||
|
Documentation=https://thearsse.com/manual/ |
||||
|
Requires=arsse-fetch.service |
||||
|
Wants=php-fpm.service php-legacy-fpm.service |
||||
|
|
||||
|
[Install] |
||||
|
WantedBy=multi-user.target |
||||
|
|
||||
|
[Service] |
||||
|
Type=oneshot |
||||
|
RemainAfterExit=true |
||||
|
ExecStart=/usr/bin/true |
@ -0,0 +1 @@ |
|||||
|
ARSSE_PHP=/usr/bin/php |
Loading…
Reference in new issue