mirrors/ngircd
1
0
Fork 0
mirror of https://github.com/osmarks/ngircd.git synced 2024-12-12 01:40:27 +00:00
Code Issues Releases Wiki Activity
ff0a9b9c2a
ngircd/contrib/ngircd.service

47 lines
1.3 KiB
SYSTEMD
Raw Normal View History

Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
# ngIRCd systemd service unit.
# See systemd(1), systemd.unit(5), systemd.service(5), systemd.exec(5).
contrib/ngircd.service: systemd service file for ngircd Thanks to Kyle Keen <keenerd@gmail.com>: Date: Sat, 18 Aug 2012 08:28:22 -0400 Message-ID: <CAAKTTKNNmrB=8XtxcV6w1Q-RQ6J_xTTDGD4MHQFaDy6V3=B19Q@mail.gmail.com> From: keenerd <keenerd@gmail.com> To: ngircd-ml@ngircd.barton.de Subject: [ngIRCd-ML] systemd service Hello all. Linked is a service file for ngircd. Please add this to your source tree so other people don't have to learn to write service files ;-) https://projects.archlinux.org/svntogit/community.git/plain/trunk/ngircd.service?h=packages/ngircd -Kyle Keen Arch Linux TU http://kmkeen.com
2012-08-18 13:51:28 +00:00
[Unit]
Description=Next Generation IRC Daemon
Enhance systemd service file - Add homepage :-) - Remote CAP_SETUID and CAP_SETGID from CapabilityBoundingSet: This is nor needed, because the unit already sets User=irc and Group=irc. - Add RestrictAddressFamilies, and restrict it to AF_INET and AF_INET6. - Read in the Debian "default files", but note: only PARAMS is supported!
2017-01-05 23:34:51 +00:00
Documentation=man:ngircd(8) man:ngircd.conf(5) https://ngircd.barton.de
contrib/ngircd.service: systemd service file for ngircd Thanks to Kyle Keen <keenerd@gmail.com>: Date: Sat, 18 Aug 2012 08:28:22 -0400 Message-ID: <CAAKTTKNNmrB=8XtxcV6w1Q-RQ6J_xTTDGD4MHQFaDy6V3=B19Q@mail.gmail.com> From: keenerd <keenerd@gmail.com> To: ngircd-ml@ngircd.barton.de Subject: [ngIRCd-ML] systemd service Hello all. Linked is a service file for ngircd. Please add this to your source tree so other people don't have to learn to write service files ;-) https://projects.archlinux.org/svntogit/community.git/plain/trunk/ngircd.service?h=packages/ngircd -Kyle Keen Arch Linux TU http://kmkeen.com
2012-08-18 13:51:28 +00:00
After=network.target
Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
Wants=anope.service atheme.service irc-services.service
Add "hopm.service" to "Wants" and "Before" dependencies in systemd unit file
2023-10-17 14:15:38 +00:00
Wants=bopm.service hopm.service
Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
Before=anope.service atheme.service irc-services.service
Add "hopm.service" to "Wants" and "Before" dependencies in systemd unit file
2023-10-17 14:15:38 +00:00
Before=bopm.service hopm.service
contrib/ngircd.service: systemd service file for ngircd Thanks to Kyle Keen <keenerd@gmail.com>: Date: Sat, 18 Aug 2012 08:28:22 -0400 Message-ID: <CAAKTTKNNmrB=8XtxcV6w1Q-RQ6J_xTTDGD4MHQFaDy6V3=B19Q@mail.gmail.com> From: keenerd <keenerd@gmail.com> To: ngircd-ml@ngircd.barton.de Subject: [ngIRCd-ML] systemd service Hello all. Linked is a service file for ngircd. Please add this to your source tree so other people don't have to learn to write service files ;-) https://projects.archlinux.org/svntogit/community.git/plain/trunk/ngircd.service?h=packages/ngircd -Kyle Keen Arch Linux TU http://kmkeen.com
2012-08-18 13:51:28 +00:00
[Service]
Add support for the "sd_notify" protocol This allows the "ngircd.service" systemd(8) unit to use the "notify" service type, which allows for better status tracking by the service manager.
2024-04-05 20:38:22 +00:00
Type=notify
Update systemd service file
2015-08-14 17:55:32 +00:00
User=irc
Group=irc
Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
# Settings & limits:
Enhance systemd service file - Add homepage :-) - Remote CAP_SETUID and CAP_SETGID from CapabilityBoundingSet: This is nor needed, because the unit already sets User=irc and Group=irc. - Add RestrictAddressFamilies, and restrict it to AF_INET and AF_INET6. - Read in the Debian "default files", but note: only PARAMS is supported!
2017-01-05 23:34:51 +00:00
CapabilityBoundingSet=CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
Update systemd service file
2015-08-14 17:55:32 +00:00
PrivateDevices=yes
Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
PrivateTmp=yes
ProtectControlGroups=yes
ProtectHome=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
Update systemd service file
2015-08-14 17:55:32 +00:00
ProtectSystem=full
Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
RestrictRealtime=yes
Update systemd service file
2015-08-14 17:55:32 +00:00
RuntimeDirectory=ircd
RuntimeDirectoryMode=750
Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
# Try to load "default files" from any Debian package variant to keep this
# unit generic.
Enhance systemd service file - Add homepage :-) - Remote CAP_SETUID and CAP_SETGID from CapabilityBoundingSet: This is nor needed, because the unit already sets User=irc and Group=irc. - Add RestrictAddressFamilies, and restrict it to AF_INET and AF_INET6. - Read in the Debian "default files", but note: only PARAMS is supported!
2017-01-05 23:34:51 +00:00
EnvironmentFile=-/etc/default/ngircd
EnvironmentFile=-/etc/default/ngircd-full
EnvironmentFile=-/etc/default/ngircd-full-dbg
Further enhance systemd unit file - Add more comments/documentation. - Add dependencies for services and proxy scanners. - Add more limit configurations. - Allow AF_UNIX address family, required for syslog!
2017-01-06 21:50:24 +00:00
# Start ngIRCd. Note: systemd doesn't allow to use $DAEMON here!
Add support for the "sd_notify" protocol This allows the "ngircd.service" systemd(8) unit to use the "notify" service type, which allows for better status tracking by the service manager.
2024-04-05 20:38:22 +00:00
ExecStart=/usr/sbin/ngircd --nodaemon --syslog $PARAMS
contrib/ngircd.service: systemd service file for ngircd Thanks to Kyle Keen <keenerd@gmail.com>: Date: Sat, 18 Aug 2012 08:28:22 -0400 Message-ID: <CAAKTTKNNmrB=8XtxcV6w1Q-RQ6J_xTTDGD4MHQFaDy6V3=B19Q@mail.gmail.com> From: keenerd <keenerd@gmail.com> To: ngircd-ml@ngircd.barton.de Subject: [ngIRCd-ML] systemd service Hello all. Linked is a service file for ngircd. Please add this to your source tree so other people don't have to learn to write service files ;-) https://projects.archlinux.org/svntogit/community.git/plain/trunk/ngircd.service?h=packages/ngircd -Kyle Keen Arch Linux TU http://kmkeen.com
2012-08-18 13:51:28 +00:00
ExecReload=/bin/kill -HUP $MAINPID
Ping the service manager and set a status message Periodically "ping" the service manager (every 3 seconds) and set a status message showing connection statistics. This enables using the systemd(8) watchdog functionality for the "ngircd.service" unit.
2024-04-05 20:48:22 +00:00
# Error handling:
# ngIRCd tries to "ping" the service manager every 3 seconds.
WatchdogSec=10
Update systemd service file
2015-08-14 17:55:32 +00:00
Restart=on-failure
contrib/ngircd.service: systemd service file for ngircd Thanks to Kyle Keen <keenerd@gmail.com>: Date: Sat, 18 Aug 2012 08:28:22 -0400 Message-ID: <CAAKTTKNNmrB=8XtxcV6w1Q-RQ6J_xTTDGD4MHQFaDy6V3=B19Q@mail.gmail.com> From: keenerd <keenerd@gmail.com> To: ngircd-ml@ngircd.barton.de Subject: [ngIRCd-ML] systemd service Hello all. Linked is a service file for ngircd. Please add this to your source tree so other people don't have to learn to write service files ;-) https://projects.archlinux.org/svntogit/community.git/plain/trunk/ngircd.service?h=packages/ngircd -Kyle Keen Arch Linux TU http://kmkeen.com
2012-08-18 13:51:28 +00:00
[Install]
WantedBy=multi-user.target
Reference in New Issue Copy Permalink