This unit is provided by:
Options
-
[Install]-
WantedBy=multi-user.target
-
-
[Service]-
AmbientCapabilities= -
CapabilityBoundingSet= -
Environment=NODE_ENV=production -
ExecStart=/usr/bin/kresus -c /etc/webapps/kresus/config.ini -
Group=kresus -
LockPersonalityIntroduced in systemd 235=yes -
NoNewPrivilegesIntroduced in systemd 239=yes -
PermissionsStartOnly=yes -
PrivateDevicesIntroduced in systemd 209=yes -
PrivateTmp=yes -
PrivateUsers=yes -
ProtectClockIntroduced in systemd 245=yes -
ProtectControlGroupsIntroduced in systemd 232=yes -
ProtectHomeIntroduced in systemd 214=yes -
ProtectHostnameIntroduced in systemd 242=yes -
ProtectKernelLogsIntroduced in systemd 244=yes -
ProtectKernelModulesIntroduced in systemd 232=yes -
ProtectKernelTunablesIntroduced in systemd 232=yes -
ProtectProcIntroduced in systemd 247=invisible -
ProtectSystemIntroduced in systemd 214=strict -
Restart=always -
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK -
RestrictNamespacesIntroduced in systemd 233=yes -
RestrictRealtimeIntroduced in systemd 231=yes -
RestrictSUIDSGIDIntroduced in systemd 242=yes -
StateDirectory=kresus -
SystemCallArchitectures=native -
SystemCallErrorNumber=EPERM -
SystemCallFilter=@system-service -
Type=simple -
User=kresus -
WorkingDirectory=~
-
-
[Unit]-
After=network.target -
Description=Kresus service
-
Additionnal notes
Nothing here.