| 12345678910111213141516171819202122232425262728293031323334353637383940 |
- [Unit]
- Description=vocat cellular and VoWiFi control service
- After=network-online.target
- Wants=network-online.target
- [Service]
- Type=simple
- User=root
- Group=root
- WorkingDirectory=/opt/vocat
- ExecStart=/opt/vocat/bin/vocat
- Restart=on-failure
- RestartSec=3s
- TimeoutStartSec=30s
- TimeoutStopSec=20s
- Environment=VOCAT_ADDR=0.0.0.0:7575
- Environment=VOCAT_DATABASE_PATH=/opt/vocat/data/vocat.db
- EnvironmentFile=/etc/vocat/vocat.env
- AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW
- CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW
- NoNewPrivileges=true
- PrivateTmp=true
- PrivateDevices=false
- ProtectSystem=strict
- ProtectHome=true
- ProtectKernelLogs=true
- ProtectKernelModules=true
- ProtectKernelTunables=true
- ProtectControlGroups=true
- ReadWritePaths=/opt/vocat/data
- RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
- RestrictRealtime=true
- LockPersonality=true
- MemoryDenyWriteExecute=true
- UMask=0077
- LimitNOFILE=65536
- [Install]
- WantedBy=multi-user.target
|
