adapt systemd files of pricenode and seednode to haveno

- adapt systemd file for seednode to Haveno and improve hardening
- adapt systemd file for pricenode to Haveno and improve hardening
- some live hardening options might not have been added here
This commit is contained in:
erciccione 2022-08-04 11:04:49 +02:00 committed by woodser
parent 4325e3e0fb
commit 25b2d6591a
3 changed files with 35 additions and 41 deletions

View file

@ -0,0 +1,32 @@
[Unit]
Description=Haveno seednode
After=network.target
[Service]
User=haveno
Group=haveno
SyslogIdentifier=Haveno-Seednode
# $PATH is a placeholder
ExecStart=/bin/sh $PATH/haveno-seednode --baseCurrencyNetwork=XMR_STAGENET\
--useLocalhostForP2P=false\
--useDevPrivilegeKeys=false\
--nodePort=2002\
--appName=haveno-XMR_STAGENET_Seed_2002
ExecStop=/bin/kill ${MAINPID}
Restart=always
# Hardening
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
PrivateDevices=true
MemoryDenyWriteExecute=false
ProtectControlGroups=true
ProtectKernelTunables=true
RestrictSUIDSGID=true
[Install]
WantedBy=multi-user.target