logtracker.service: increase isolation

This commit is contained in:
Christophe Siraut 2020-09-02 08:49:01 +02:00
parent 45ecf79177
commit 9c55841291
1 changed files with 6 additions and 3 deletions

View File

@ -1,7 +1,6 @@
[Unit]
Description=logtracker
After=network.target syslog.target postgresql.service
Wants=postgresql.service
After=network.target postgresql.service
[Service]
Type=notify
@ -13,9 +12,13 @@ ExecStartPre=/usr/bin/logtracker-manage collectstatic --noinput
ExecStart=/usr/bin/uwsgi --ini /etc/%p/uwsgi.ini
ExecReload=/bin/kill -HUP $MAINPID
KillSignal=SIGQUIT
PrivateTmp=true
Restart=on-failure
RuntimeDirectory=logtracker
ProtectSystem=strict
ProtectHome=yes
ProtectDevices=yes
NoNewPrivileges=yes
PrivateTmp=yes
[Install]
WantedBy=multi-user.target