amigan/rustypaste-pretty
1
0
Fork 0
mirror of https://github.com/amigan/rustypaste-pretty.git synced 2024-11-21 03:49:47 -05:00
Code Issues Projects Releases Packages Wiki Activity

chore(systemd): add systemd service files (#22)

Browse source 
Add systemd files to serve files from /var/lib/rustypaste, automatic
user creation via systemd-sysusers and AUTH_TOKEN configuration via
rustypaste.env in /etc/rustypaste/rustypaste.env.

implements #16
This commit is contained in:
frederik 2022-03-25 21:51:20 +01:00 committed by GitHub
parent 8ed0b7bbf1
commit 8679ff91dc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 35 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
extra/systemd/rustypaste.env Normal file
View file

@ -0,0 +1,2 @@
# To enable basic HTTP auth, set the AUTH_TOKEN
AUTH_TOKEN=""

31
extra/systemd/rustypaste.service Normal file
View file

@ -0,0 +1,31 @@
[Unit]
Description=Rustypaste server
After=network-online.target
Wants=network-online.target systemd-networkd-wait-online.service
[Service]
User=rustypaste
Group=rustypaste
ExecStart=/usr/bin/rustypaste
ReadWritePaths=/var/lib/rustypaste
ReadOnlyPaths=/etc/rustypaste
WorkingDirectory=/var/lib/rustypaste
Environment="CONFIG=/etc/rustypaste/config.toml"
EnvironmentFile=/etc/rustypaste/rustypaste.env
# Hardening options
CapabilityBoundingSet=
AmbientCapabilities=
NoNewPrivileges=true
ProtectHome=true
ProtectSystem=strict
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
PrivateTmp=true
PrivateDevices=true
LockPersonality=true
[Install]
WantedBy=multi-user.target

1
extra/systemd/rustypaste.sysusers Normal file
View file

@ -0,0 +1 @@
u rustypaste - "Minimal file upload/pastebin service" /var/lib/rustypaste

1
extra/systemd/rustypaste.tmpfiles Normal file
View file

@ -0,0 +1 @@
d /var/lib/rustypaste 0750 rustypaste rustypaste