Annotation of ircnowd/contrib/ngircd.service, Revision 1.1.1.1
1.1 tomglok 1: # ngIRCd systemd service unit.
2: # See systemd(1), systemd.unit(5), systemd.service(5), systemd.exec(5).
3:
4: [Unit]
5: Description=Next Generation IRC Daemon
6: Documentation=man:ngircd(8) man:ngircd.conf(5) https://ngircd.barton.de
7: After=network.target
8: Wants=anope.service atheme.service irc-services.service
9: Wants=bopm.service
10: Before=anope.service atheme.service irc-services.service
11: Before=bopm.service
12:
13: [Service]
14: Type=forking
15: User=irc
16: Group=irc
17: # Settings & limits:
18: CapabilityBoundingSet=CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
19: MemoryDenyWriteExecute=yes
20: NoNewPrivileges=yes
21: PrivateDevices=yes
22: PrivateTmp=yes
23: ProtectControlGroups=yes
24: ProtectHome=yes
25: ProtectKernelModules=yes
26: ProtectKernelTunables=yes
27: ProtectSystem=full
28: RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
29: RestrictRealtime=yes
30: RuntimeDirectory=ircd
31: RuntimeDirectoryMode=750
32: # Try to load "default files" from any Debian package variant to keep this
33: # unit generic.
34: EnvironmentFile=-/etc/default/ngircd
35: EnvironmentFile=-/etc/default/ngircd-full
36: EnvironmentFile=-/etc/default/ngircd-full-dbg
37: # Start ngIRCd. Note: systemd doesn't allow to use $DAEMON here!
38: ExecStart=/usr/sbin/ngircd $PARAMS
39: ExecReload=/bin/kill -HUP $MAINPID
40: Restart=on-failure
41:
42: [Install]
43: WantedBy=multi-user.target
CVSweb