filtron.service 704 B

123456789101112131415161718192021222324252627282930
  1. [Unit]
  2. Description=${SERVICE_NAME}
  3. After=syslog.target
  4. After=network.target
  5. [Service]
  6. Type=simple
  7. User=${SERVICE_USER}
  8. Group=${SERVICE_GROUP}
  9. WorkingDirectory=${SERVICE_HOME}
  10. ExecStart=${SERVICE_HOME}/go-apps/bin/filtron -api '${FILTRON_API}' -listen '${FILTRON_LISTEN}' -rules '${FILTRON_RULES}' -target '${FILTRON_TARGET}'
  11. Restart=always
  12. Environment=USER=${SERVICE_USER} HOME=${SERVICE_HOME}
  13. # Some distributions may not support these hardening directives. If you cannot
  14. # start the service due to an unknown option, comment out the ones not supported
  15. # by your version of systemd.
  16. ProtectSystem=full
  17. PrivateDevices=yes
  18. PrivateTmp=yes
  19. NoNewPrivileges=true
  20. [Install]
  21. WantedBy=multi-user.target