Robert Sprunk
d063688422
Move PrivateDevices to a separate section and add a comment
...
Signed-off-by: Robert Sprunk <git@sprunk.me >
2019-12-09 14:28:19 +01:00
Robert Sprunk
856030d5f9
Allow access to real alsa hardware by systemd
...
Signed-off-by: Robert Sprunk <git@sprunk.me >
2019-11-13 17:04:13 +01:00
jvoisin and Evan Harris
eb4c5a04ff
Make the systemd unit compatible with tomcat9
...
- Use ReadWritePaths by default, since it doesn't
cause any harm
- Rephrase the ProtectSystem comment, to make it more clear
- Fix verbs in a comment
2019-09-03 04:54:43 -05:00
jvoisin
40a5150b6e
Don't use ProtectHome by default in the systemd unit
...
Some people might put media in /home/…/
2019-06-02 16:05:47 +02:00
Jonas L and jvoisin
0878a71cc7
Use spaces instead of coma in systemd lists
...
From systemd man pages https://www.freedesktop.org/software/systemd/man/systemd.exec.html#System%20Call%20Filtering
2019-05-27 22:27:00 +00:00
jvoisin
9fb56c031b
Fix the systemd unit file for OpenJDK
2019-04-05 19:51:15 +02:00
jvoisin and Andrew DeMaria
ab92f83c1f
Add a bunch of hardening to the systemd unit
...
I tested this locally, it's working on my machine™
Nothing fancy, no new privileges, private stuff (/tmp, …),
no exotic devices/access/…, …
Signed-off-by: jvoisin <julien.voisin@dustri.org >
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com >
2019-03-26 14:27:52 -06:00
Andrew DeMaria
4b488cd349
Added example env file for systemd
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com >
2017-08-12 13:56:23 -06:00
Andrew DeMaria
bd9c793500
Added example airsonic.service
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com >
2017-08-12 11:23:40 -06:00
Robert Sprunk