contrib/ngircd.service

   1 # ngIRCd systemd service unit.
   2 # See systemd(1), systemd.unit(5), systemd.service(5), systemd.exec(5).
   3
   4 [Unit]
   5 Description=Next Generation IRC Daemon
   6 Documentation=man:ngircd(8) man:ngircd.conf(5) https://ngircd.barton.de
   7 After=network.target
   8 Wants=anope.service atheme.service irc-services.service
   9 Wants=bopm.service
  10 Before=anope.service atheme.service irc-services.service
  11 Before=bopm.service
  12
  13 [Service]
  14 Type=forking
  15 User=irc
  16 Group=irc
  17 # Settings & limits:
  18 CapabilityBoundingSet=CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
  19 MemoryDenyWriteExecute=yes
  20 NoNewPrivileges=yes
  21 PrivateDevices=yes
  22 PrivateTmp=yes
  23 ProtectControlGroups=yes
  24 ProtectHome=yes
  25 ProtectKernelModules=yes
  26 ProtectKernelTunables=yes
  27 ProtectSystem=full
  28 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
  29 RestrictRealtime=yes
  30 RuntimeDirectory=ircd
  31 RuntimeDirectoryMode=750
  32 # Try to load "default files" from any Debian package variant to keep this
  33 # unit generic.
  34 EnvironmentFile=-/etc/default/ngircd
  35 EnvironmentFile=-/etc/default/ngircd-full
  36 EnvironmentFile=-/etc/default/ngircd-full-dbg
  37 # Start ngIRCd. Note: systemd doesn't allow to use $DAEMON here!
  38 ExecStart=/usr/sbin/ngircd $PARAMS
  39 ExecReload=/bin/kill -HUP $MAINPID
  40 Restart=on-failure
  41
  42 [Install]
  43 WantedBy=multi-user.target