Update systemd service file
authorAlexander Barton <alex@barton.de>
Fri, 14 Aug 2015 17:55:32 +0000 (19:55 +0200)
committerAlexander Barton <alex@barton.de>
Fri, 14 Aug 2015 17:55:32 +0000 (19:55 +0200)
contrib/ngircd.service

index b71eef2..f24ef60 100644 (file)
@@ -4,8 +4,19 @@ After=network.target
 
 [Service]
 Type=forking
+User=irc
+Group=irc
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=full
+ProtectHome=true
+NoNewPrivileges=true
+RuntimeDirectory=ircd
+RuntimeDirectoryMode=750
 ExecStart=/usr/sbin/ngircd
 ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-failure
 
 [Install]
 WantedBy=multi-user.target