Annotation of ircnowd/contrib/ngircd.service, Revision 1.1
1.1 ! tomglok 1: # ngIRCd systemd service unit.
! 2: # See systemd(1), systemd.unit(5), systemd.service(5), systemd.exec(5).
! 3:
! 4: [Unit]
! 5: Description=Next Generation IRC Daemon
! 6: Documentation=man:ngircd(8) man:ngircd.conf(5) https://ngircd.barton.de
! 7: After=network.target
! 8: Wants=anope.service atheme.service irc-services.service
! 9: Wants=bopm.service
! 10: Before=anope.service atheme.service irc-services.service
! 11: Before=bopm.service
! 12:
! 13: [Service]
! 14: Type=forking
! 15: User=irc
! 16: Group=irc
! 17: # Settings & limits:
! 18: CapabilityBoundingSet=CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
! 19: MemoryDenyWriteExecute=yes
! 20: NoNewPrivileges=yes
! 21: PrivateDevices=yes
! 22: PrivateTmp=yes
! 23: ProtectControlGroups=yes
! 24: ProtectHome=yes
! 25: ProtectKernelModules=yes
! 26: ProtectKernelTunables=yes
! 27: ProtectSystem=full
! 28: RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
! 29: RestrictRealtime=yes
! 30: RuntimeDirectory=ircd
! 31: RuntimeDirectoryMode=750
! 32: # Try to load "default files" from any Debian package variant to keep this
! 33: # unit generic.
! 34: EnvironmentFile=-/etc/default/ngircd
! 35: EnvironmentFile=-/etc/default/ngircd-full
! 36: EnvironmentFile=-/etc/default/ngircd-full-dbg
! 37: # Start ngIRCd. Note: systemd doesn't allow to use $DAEMON here!
! 38: ExecStart=/usr/sbin/ngircd $PARAMS
! 39: ExecReload=/bin/kill -HUP $MAINPID
! 40: Restart=on-failure
! 41:
! 42: [Install]
! 43: WantedBy=multi-user.target
CVSweb