added service file

2021-10-05 18:33:13 +02:00
parent 50b44d9762
commit 751e7213c9
1 changed files with 26 additions and 0 deletions
--- a/csgowtfd.service
+++ b/csgowtfd.service
@@ -0,0 +1,26 @@
+[Unit]
+Description=CSSGOWTF backend service
+After=network.target
+
+[Service]
+DynamicUser=yes
+ExecStart=/opt/csgowtfd/csgowtfd
+WorkingDirectory=/var/lib/csgowtfd
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+DevicePolicy=closed
+ProtectSystem=strict
+ProtectHome=read-only
+ProtectControlGroups=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+MemoryDenyWriteExecute=yes
+LockPersonality=yes
+
+[Install]
+WantedBy=multi-user.target