| 1234567891011121314151617181920212223242526272829303132333435363738394041424344 |
- [Unit]
- Description=decentralized network whois daemon
- Documentation=https://codeberg.org/mark22k/dnet-whois
- After=network.target
- [Service]
- ProtectSystem=strict
- ProtectHome=true
- PrivateDevices=true
- ProtectKernelTunables=true
- ProtectKernelModules=true
- ProtectControlGroups=true
- PrivateTmp=true
- PrivateMounts=true
- PrivateUsers=true
- ProtectClock=true
- ProtectControlGroups=true
- ProtectKernelLogs=true
- ProtectProc=true
- ProtectSystem=true
- RestrictSUIDSGID=true
- SystemCallFilter=
- AmbientCapabilities=
- RestrictNamespaces=
- LockPersonality=true
- RemoveIPC=true
- MemoryDenyWriteExecute=true
- ProtectHostname=true
- ProcSubset=
- PermissionsStartOnly=true
- LimitNOFILE=1048576
- LimitNPROC=512
- CapabilityBoundingSet=CAP_NET_BIND_SERVICE
- AmbientCapabilities=CAP_NET_BIND_SERVICE
- NoNewPrivileges=true
- User=dnet-whois
- ExecStart=/usr/bin/ruby /home/dnet-whois/dnet-whois/lib/main.rb
- ExecReload=/bin/kill -SIGUSR1 $MAINPID
- Restart=on-failure
- [Install]
- WantedBy=multi-user.target
|
