This unit is provided by:
Options
-
[Install]-
WantedBy=multi-user.target
-
-
[Service]-
AmbientCapabilities= -
CapabilityBoundingSet= -
ExecStart=/usr/bin/cozy-stack serve -
Group=cozy -
LockPersonalityIntroduced in systemd 235=yes -
NoNewPrivilegesIntroduced in systemd 239=yes -
PermissionsStartOnly=yes -
PrivateDevicesIntroduced in systemd 209=yes -
PrivateTmp=yes -
PrivateUsers=yes -
ProtectClockIntroduced in systemd 245=yes -
ProtectControlGroupsIntroduced in systemd 232=yes -
ProtectHomeIntroduced in systemd 214=yes -
ProtectHostnameIntroduced in systemd 242=yes -
ProtectKernelLogsIntroduced in systemd 244=yes -
ProtectKernelModulesIntroduced in systemd 232=yes -
ProtectKernelTunablesIntroduced in systemd 232=yes -
ProtectProcIntroduced in systemd 247=invisible -
ProtectSystemIntroduced in systemd 214=strict -
Restart=always -
RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX -
RestrictNamespacesIntroduced in systemd 233=yes -
RestrictRealtimeIntroduced in systemd 231=yes -
RestrictSUIDSGIDIntroduced in systemd 242=yes -
StateDirectory=cozy -
SystemCallArchitectures=native -
SystemCallErrorNumber=EPERM -
SystemCallFilter=@system-service -
User=cozy -
WorkingDirectory=~
-
-
[Unit]-
After=network.target couchdb.service -
Description=Cozy service -
Wants=couchdb.service
-
Additionnal notes
Nothing here.