mirror of
https://github.com/restic/rest-server.git
synced 2026-04-10 20:22:14 -07:00
Merge pull request #118 from andreaso/restrict-systemd-service
Make example systemd service more restrictive
This commit is contained in:
@@ -7,9 +7,16 @@ After=network.target
|
|||||||
Type=simple
|
Type=simple
|
||||||
User=www-data
|
User=www-data
|
||||||
Group=www-data
|
Group=www-data
|
||||||
ExecStart=/usr/local/bin/rest-server --path /tmp/restic
|
ExecStart=/usr/local/bin/rest-server --path /path/to/backups
|
||||||
Restart=always
|
Restart=always
|
||||||
RestartSec=5
|
RestartSec=5
|
||||||
|
|
||||||
|
# Optional security enhancements
|
||||||
|
NoNewPrivileges=yes
|
||||||
|
PrivateTmp=yes
|
||||||
|
ProtectSystem=strict
|
||||||
|
ProtectHome=yes
|
||||||
|
ReadWritePaths=/path/to/backups
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
|
|||||||
Reference in New Issue
Block a user