matrix.grapheneos.org/systemd/system/matterbridge.service.d/local.conf

mirror of https://github.com/GrapheneOS/matrix.grapheneos.org.git synced 2024-06-18 06:49:38 +00:00
[Service]
# use a persistent user so that nftables can use it for skuid rules
DynamicUser=false

MemoryDenyWriteExecute=true
RemoveIPC=true
ProcSubset=pid
ProtectProc=invisible
Restart=always
extend matterbridge service hardening 2022-08-09 10:18:21 +00:00			`[Service]`
			`# use a persistent user so that nftables can use it for skuid rules`
			`DynamicUser=false`

			`MemoryDenyWriteExecute=true`
			`RemoveIPC=true`
			`ProcSubset=pid`
			`ProtectProc=invisible`
always restart matterbridge if it exits 2024-04-27 13:12:44 +00:00			`Restart=always`