This unit is provided by:
Options
-
[Install]
-
WantedBy=multi-user.target
-
-
[Service]
-
AmbientCapabilities=
-
CapabilityBoundingSet=
-
Environment=USER=gitea HOME=/var/lib/gitea GITEA_WORK_DIR=/var/lib/gitea
-
ExecStart=/usr/bin/gitea web -c /etc/gitea/app.ini
-
Group=gitea
-
LockPersonality
Introduced in systemd 235=yes -
LogsDirectory=gitea
-
NoNewPrivileges
Introduced in systemd 239=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateTmp=yes
-
PrivateUsers=yes
-
ProtectClock
Introduced in systemd 245=yes -
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectProc
Introduced in systemd 247=invisible -
ProtectSystem
Introduced in systemd 214=strict -
ReadWritePaths=/etc/gitea/app.ini
-
Restart=always
-
RestartSec=2s
-
RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
RuntimeDirectory=gitea
-
StateDirectory=gitea
-
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service
-
Type=simple
-
User=gitea
-
WorkingDirectory=~
-
-
[Unit]
-
After=syslog.target network.target mysqld.service postgresql.service memcached.service redis.service
-
Description=Gitea (Git with a cup of tea)
-
Additionnal notes
Nothing here.