flag for config location, adjusted .service

2021-10-05 18:46:53 +02:00
parent 751e7213c9
commit eb9fcbee03
2 changed files with 8 additions and 4 deletions
--- a/csgowtfd.service
+++ b/csgowtfd.service
@@ -6,12 +6,15 @@ After=network.target
 DynamicUser=yes
 ExecStart=/opt/csgowtfd/csgowtfd
 WorkingDirectory=/var/lib/csgowtfd
+RuntimeDirectory=csgowtfd
+StateDirectory=csgowtfd
+ConfigurationDirectory=csgowtfd
+
+# more hardening
 NoNewPrivileges=yes
 PrivateTmp=yes
 PrivateDevices=yes
 DevicePolicy=closed
-ProtectSystem=strict
-ProtectHome=read-only
 ProtectControlGroups=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
@@ -23,4 +26,4 @@ MemoryDenyWriteExecute=yes
 LockPersonality=yes

 [Install]
-WantedBy=multi-user.target
+WantedBy=multi-user.target