This unit is provided by:
Options
-
[Service]
-
CacheDirectory=jellyfin
-
CacheDirectoryMode=0700
-
ExecStart=/usr/bin/jellyfin --datadir '/var/lib/jellyfin' --cachedir '/var/cache/jellyfin'
-
Group=jellyfin
-
LockPersonality
Introduced in systemd 235=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
PrivateDevices
Introduced in systemd 209=no -
PrivateTmp=yes
-
PrivateUsers=yes
-
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
RemoveIPC
Introduced in systemd 232=yes -
Restart=on-failure
-
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
StateDirectory=jellyfin
-
StateDirectoryMode=0700
-
SuccessExitStatus=0 143
-
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=~@clock ~@aio ~@chown ~@cpu-emulation ~@debug ~@keyring ~@memlock ~@module ~@mount ~@obsolete ~@privileged ~@raw-io ~@reboot ~@setuid ~@swap
-
TimeoutSec=15
-
Type=simple
-
UMask=0077
-
User=jellyfin
-
WorkingDirectory=/var/lib/jellyfin
-
-
[Unit]
-
After=network.target
-
Description=Jellyfin Media Server
-
Additionnal notes
Nothing here.