computernewb/whitelister-eternal
6
0
Fork 0
Code Issues 1 Pull requests Actions Packages Projects Releases Wiki Activity

add example systemd service

Browse source
This commit is contained in:
Elijah R 2024-07-26 00:55:46 -04:00
parent 2156c6f2b4
commit 4e771c9638
1 changed files with 26 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
whitelister.service Normal file
View file

@ -0,0 +1,26 @@
[Unit]
Description=Whitelister Eternal
[Service]
User=whitelister
Group=whitelister
Restart=always
RestartSec=5
Type=simple
WorkingDirectory=/srv/whitelister
Environment=NODE_ENV=production
ExecStart=/usr/bin/node /srv/whitelister/dist/index.js
MemoryMax=4G
# Hardening
PrivateTmp=yes
NoNewPrivileges=true
RestrictNamespaces=uts ipc pid user cgroup
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
PrivateDevices=yes
RestrictSUIDSGID=true
[Install]
WantedBy=multi-user.target