This unit is provided by:
Options
-
[Service]
-
CapabilityBoundingSet=
-
ExecStart=/usr/bin/redis-server /var/lib/redis-paperless/redis.conf
-
ExecStartPre=+redis-paperless-prep-conf
-
Group=redis-paperless
-
LimitNOFILE=10032
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateMounts=yes
-
PrivateTmp=yes
-
PrivateUsers=yes
-
ProtectClock
Introduced in systemd 245=yes -
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=strict -
RestrictAddressFamilies=AF_UNIX
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
RuntimeDirectory=redis-paperless
-
RuntimeDirectoryMode=0750
-
StateDirectory=redis-paperless
-
StateDirectoryMode=0700
-
SystemCallArchitectures=native
-
SystemCallFilter=~@cpu-emulation @debug @keyring @memlock @mount @obsolete @privileged @resources @setuid
-
Type=notify
-
UMask=0077
-
User=redis-paperless
-
-
[Unit]
-
After=network.target
-
Description=Redis Server - redis-paperless
-
Additionnal notes
Nothing here.