From cc8524960dc415ceca957dcec2e2d424c514b621 Mon Sep 17 00:00:00 2001 From: Leonardo Bishop Date: Thu, 11 Sep 2025 21:49:03 +0100 Subject: Rename to stash --- stash.service | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 stash.service (limited to 'stash.service') diff --git a/stash.service b/stash.service new file mode 100644 index 0000000..24a1727 --- /dev/null +++ b/stash.service @@ -0,0 +1,33 @@ +[Unit] +Description=Saved articles tracker + +[Service] +User=history +Restart=always +ExecStart=/usr/bin/history +StateDirectory=history +ConfigurationDirectory=history +WorkingDirectory=/var/lib/history + +CapabilityBoundingSet=CAP_NET_BIND_SERVICE +AmbientCapabilities=CAP_NET_BIND_SERVICE +NoNewPrivileges=true +SystemCallFilter=@system-service +SystemCallErrorNumber=EPERM + +ProtectSystem=strict +ProtectHome=true +PrivateTmp=true +PrivateDevices=true +ExecPaths=/usr/bin/history + +ProtectKernelTunables=true +ProtectKernelModules=true +ProtectKernelLogs=true +ProtectControlGroups=true +ProtectClock=true +RestrictRealtime=true +RestrictSUIDSGID=true + +[Install] +WantedBy=multi-user.target -- cgit v1.2.3-70-g09d2