diff options
Diffstat (limited to 'contrib/init/linux-systemd/ejabberd-cleanup.service')
-rw-r--r-- | contrib/init/linux-systemd/ejabberd-cleanup.service | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/contrib/init/linux-systemd/ejabberd-cleanup.service b/contrib/init/linux-systemd/ejabberd-cleanup.service index 4bea474..ea608d5 100644 --- a/contrib/init/linux-systemd/ejabberd-cleanup.service +++ b/contrib/init/linux-systemd/ejabberd-cleanup.service @@ -1,5 +1,7 @@ [Unit] Description=Clean up ejabberd +Documentation=https://dev.sum7.eu/sum7/ejabberd-tools/-/blob/master/README.md +Requires=ejabberd.service [Service] Type=oneshot @@ -8,6 +10,13 @@ Group=nobody Environment="PATH=/opt/ejabberd-tools/venv/bin:/usr/local/bin:/usr/bin:/bin" ExecStart=/opt/ejabberd-tools/cleanup.py WorkingDirectory=/opt/ejabberd-tools/ +PrivateDevices=true +ProtectControlGroups=true +ProtectHome=true +ProtectKernelTunables=true +ProtectKernelModules=yes +ProtectSystem=full +NoNewPrivileges=yes [Install] WantedBy=multi-user.target |