hedgedoc.service.erb
No OneTemporary
Actions

Size

1 KB

Subscribers

None

hedgedoc.service.erb
View Options

	[Unit]
	Description=HedgeDoc - The best platform to write and share markdown.
	Documentation=https://docs.hedgedoc.org/
	After=network.target
	After=postgresql.service

	[Service]
	Type=exec
	Environment=NODE_ENV=<%= @runtime_environment %>
	Environment=YARN_CACHE_FOLDER=<%= @yarn_cachedir %>
	Restart=always
	RestartSec=2s
	ExecStart=/usr/bin/yarn start --production
	CapabilityBoundingSet=
	NoNewPrivileges=true
	PrivateDevices=true
	RemoveIPC=true
	LockPersonality=true
	ProtectControlGroups=true
	ProtectKernelTunables=true
	ProtectKernelModules=true
	ProtectKernelLogs=true
	ProtectClock=true
	ProtectHostname=true
	ProtectProc=noaccess
	RestrictRealtime=true
	RestrictSUIDSGID=true
	RestrictNamespaces=true
	RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
	ProtectSystem=strict
	ProtectHome=true
	PrivateTmp=true
	SystemCallArchitectures=native
	SystemCallFilter=@system-service

	# You may have to adjust these settings
	User=<%= @user %>
	Group=<%= @group %>
	WorkingDirectory=<%= @current_symlink %>

	ReadWritePaths=<%= @uploads_dir %>

	[Install]
	WantedBy=multi-user.target