mirror of
https://github.com/haveno-dex/haveno.git
synced 2025-12-15 15:59:10 -05:00
adapt systemd files of pricenode and seednode to haveno
- adapt systemd file for seednode to Haveno and improve hardening - adapt systemd file for pricenode to Haveno and improve hardening - some live hardening options might not have been added here
This commit is contained in:
parent
4325e3e0fb
commit
25b2d6591a
3 changed files with 35 additions and 41 deletions
32
seednode/haveno-seednode.service
Normal file
32
seednode/haveno-seednode.service
Normal file
|
|
@ -0,0 +1,32 @@
|
|||
[Unit]
|
||||
Description=Haveno seednode
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
User=haveno
|
||||
Group=haveno
|
||||
SyslogIdentifier=Haveno-Seednode
|
||||
|
||||
# $PATH is a placeholder
|
||||
ExecStart=/bin/sh $PATH/haveno-seednode --baseCurrencyNetwork=XMR_STAGENET\
|
||||
--useLocalhostForP2P=false\
|
||||
--useDevPrivilegeKeys=false\
|
||||
--nodePort=2002\
|
||||
--appName=haveno-XMR_STAGENET_Seed_2002
|
||||
|
||||
ExecStop=/bin/kill ${MAINPID}
|
||||
Restart=always
|
||||
|
||||
# Hardening
|
||||
PrivateTmp=true
|
||||
ProtectSystem=full
|
||||
NoNewPrivileges=true
|
||||
PrivateDevices=true
|
||||
MemoryDenyWriteExecute=false
|
||||
ProtectControlGroups=true
|
||||
ProtectKernelTunables=true
|
||||
RestrictSUIDSGID=true
|
||||
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Loading…
Add table
Add a link
Reference in a new issue