logtracker.service: increase isolation
This commit is contained in:
parent
45ecf79177
commit
9c55841291
|
@ -1,7 +1,6 @@
|
|||
[Unit]
|
||||
Description=logtracker
|
||||
After=network.target syslog.target postgresql.service
|
||||
Wants=postgresql.service
|
||||
After=network.target postgresql.service
|
||||
|
||||
[Service]
|
||||
Type=notify
|
||||
|
@ -13,9 +12,13 @@ ExecStartPre=/usr/bin/logtracker-manage collectstatic --noinput
|
|||
ExecStart=/usr/bin/uwsgi --ini /etc/%p/uwsgi.ini
|
||||
ExecReload=/bin/kill -HUP $MAINPID
|
||||
KillSignal=SIGQUIT
|
||||
PrivateTmp=true
|
||||
Restart=on-failure
|
||||
RuntimeDirectory=logtracker
|
||||
ProtectSystem=strict
|
||||
ProtectHome=yes
|
||||
ProtectDevices=yes
|
||||
NoNewPrivileges=yes
|
||||
PrivateTmp=yes
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
|
Reference in New Issue