1234567891011121314151617181920212223242526 |
- [Unit]
- Description=Syncthing Relay Server
- After=network.target
- Documentation=man:strelaysrv(1)
- [Service]
- WorkingDirectory=/var/lib/syncthing-relaysrv
- EnvironmentFile=/etc/default/syncthing-relaysrv
- ExecStart=/usr/bin/strelaysrv -nat=${NAT} $RELAYSRV_OPTS
- # Hardening
- User=syncthing-relaysrv
- Group=syncthing
- ProtectSystem=strict
- ReadWritePaths=/var/lib/syncthing-relaysrv
- NoNewPrivileges=true
- PrivateTmp=true
- PrivateDevices=true
- ProtectHome=true
- SystemCallArchitectures=native
- MemoryDenyWriteExecute=true
- [Install]
- WantedBy=multi-user.target
- Alias=syncthing-relaysrv.service
|