X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=blobdiff_plain;f=contrib%2Fngircd.service;h=35bc6bdbbd5fbff273f5229bff6d9d13e050b3d8;hp=b71eef2b178f885fd0e06b678a0b04881c506d1e;hb=804c2403203258ba8b9bf869be3f9ef057c2d39a;hpb=3d49e8ac84b49be07565bc1a19759184b4006317

diff --git a/contrib/ngircd.service b/contrib/ngircd.service
index b71eef2b..35bc6bdb 100644
--- a/contrib/ngircd.service
+++ b/contrib/ngircd.service
@@ -1,11 +1,23 @@
 [Unit]
 Description=Next Generation IRC Daemon
+Documentation=man:ngircd(8) man:ngircd.conf(5)
 After=network.target
 
 [Service]
 Type=forking
+User=irc
+Group=irc
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=full
+ProtectHome=true
+NoNewPrivileges=true
+RuntimeDirectory=ircd
+RuntimeDirectoryMode=750
 ExecStart=/usr/sbin/ngircd
 ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-failure
 
 [Install]
 WantedBy=multi-user.target