Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
LQDN Adminsys
piops-roles
hedgedocs-pad-lqdn
Commits
ce1c92ed
Commit
ce1c92ed
authored
Nov 19, 2021
by
nono
💻
Browse files
Fix service file
parent
41ee317d
Changes
1
Hide whitespace changes
Inline
Side-by-side
files/hedgedocs.service
View file @
ce1c92ed
...
...
@@ -15,27 +15,29 @@ Environment=NODE_ENV=production
Restart
=
always
RestartSec
=
2s
ExecStart
=
npm start --production
CapabilityBoundingSet
=
NoNewPrivileges
=
true
PrivateDevices
=
true
RemoveIPC
=
true
LockPersonality
=
true
ProtectControlGroups
=
true
ProtectKernelTunables
=
true
ProtectKernelModules
=
true
ProtectKernelLogs
=
true
ProtectClock
=
true
ProtectHostname
=
true
ProtectProc
=
noaccess
RestrictRealtime
=
true
RestrictSUIDSGID
=
true
RestrictNamespaces
=
true
RestrictAddressFamilies
=
AF_UNIX AF_INET AF_INET6
ProtectSystem
=
strict
ProtectHome
=
true
PrivateTmp
=
true
SystemCallArchitectures
=
native
SystemCallFilter
=
@system-service
# CapabilityBoundingSet=
# NoNewPrivileges=true
# PrivateDevices=true
# RemoveIPC=true
# LockPersonality=true
# ProtectControlGroups=true
# ProtectKernelTunables=true
# ProtectKernelModules=true
# ProtectKernelLogs=true
# ProtectClock=true
# ProtectHostname=true
# ProtectProc=noaccess
# RestrictRealtime=true
# RestrictSUIDSGID=true
# RestrictNamespaces=true
# RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
# ProtectSystem=strict
# ProtectHome=true
# PrivateTmp=true
# SystemCallArchitectures=native
# SystemCallFilter=@system-service
StartLimitIntervalSec
=
120
StartLimitBurst
=
5
# You may have to adjust these settings
User
=
hedgedocs
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment