Conduit is a simple, fast and reliable chat server powered by Matrix https://conduit.rs
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
49 lines
1.0 KiB
49 lines
1.0 KiB
[Unit] |
|
Description=Conduit Matrix homeserver |
|
After=network.target |
|
|
|
[Service] |
|
User=_matrix-conduit |
|
Group=_matrix-conduit |
|
Type=simple |
|
|
|
AmbientCapabilities= |
|
CapabilityBoundingSet= |
|
LockPersonality=yes |
|
MemoryDenyWriteExecute=yes |
|
NoNewPrivileges=yes |
|
ProtectClock=yes |
|
ProtectControlGroups=yes |
|
ProtectHome=yes |
|
ProtectHostname=yes |
|
ProtectKernelLogs=yes |
|
ProtectKernelModules=yes |
|
ProtectKernelTunables=yes |
|
ProtectSystem=strict |
|
PrivateDevices=yes |
|
PrivateMounts=yes |
|
PrivateTmp=yes |
|
PrivateUsers=yes |
|
RemoveIPC=yes |
|
RestrictAddressFamilies=AF_INET AF_INET6 |
|
RestrictNamespaces=yes |
|
RestrictRealtime=yes |
|
RestrictSUIDSGID=yes |
|
SystemCallArchitectures=native |
|
SystemCallFilter=@system-service |
|
SystemCallErrorNumber=EPERM |
|
StateDirectory=matrix-conduit |
|
|
|
Environment="ROCKET_ENV=production" |
|
Environment="ROCKET_DATABASE_PATH=/var/lib/matrix-conduit" |
|
EnvironmentFile=/etc/matrix-conduit/debian |
|
EnvironmentFile=/etc/matrix-conduit/local |
|
|
|
ExecStart=/usr/sbin/matrix-conduit |
|
Restart=on-failure |
|
RestartSec=10 |
|
StartLimitInterval=1m |
|
StartLimitBurst=5 |
|
|
|
[Install] |
|
WantedBy=multi-user.target
|
|
|