X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=blobdiff_plain;f=contrib%2Fngircd.service;h=f24ef60c320824f065ad46c7e9bb76ca90c3f3fc;hp=b5bab060b1f69d807c96a52ff1bfbff186c71a5f;hb=7b7ee6a3ca54bf0c8442a1e990dd1e230783c2e6;hpb=160f728530806385dbeee398a20fe5eac7318c5a

diff --git a/contrib/ngircd.service b/contrib/ngircd.service
index b5bab060..f24ef60c 100644
--- a/contrib/ngircd.service
+++ b/contrib/ngircd.service
@@ -3,9 +3,20 @@ Description=Next Generation IRC Daemon
 After=network.target
 
 [Service]
-# don't daemonize to simplify stuff
-ExecStart=/usr/sbin/ngircd -n
+Type=forking
+User=irc
+Group=irc
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=full
+ProtectHome=true
+NoNewPrivileges=true
+RuntimeDirectory=ircd
+RuntimeDirectoryMode=750
+ExecStart=/usr/sbin/ngircd
 ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-failure
 
 [Install]
 WantedBy=multi-user.target