This unit is provided by:
Options
-
[Install]
-
WantedBy=multi-user.target
-
-
[Service]
-
CapabilityBoundingSet=~CAP_NET_ADMIN ~CAP_SYS_MODULE ~CAP_SYS_ADMIN ~CAP_SETUID ~CAP_SETGID ~CAP_SETPCAP ~CAP_SYS_PTRACE ~CAP_CHOWN ~CAP_FSETID ~CAP_SETFCAP ~CAP_FOWNER ~CAP_IPC_OWNER ~CAP_LINUX_IMMUTABLE ~CAP_IPC_LOCK ~CAP_SYS_CHROOT ~CAP_BLOCK_SUSPEND ~CAP_LEASE ~CAP_SYS_PACCT ~CAP_SYS_TTY_CONFIG ~CAP_SYS_BOOT
-
DynamicUser=yes
-
ExecStart=/usr/bin/syncplay-server --tls /run/syncplay-server
-
ExecStartPre=!sh -c '. /etc/default/syncplay-server ; RENEWED_DOMAINS=$DOMAIN /etc/letsencrypt/renewal-hooks/deploy/syncplay-server'
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=no -
PrivateDevices
Introduced in systemd 209=yes -
PrivateUsers=yes
-
ProtectClock
Introduced in systemd 245=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectProc
Introduced in systemd 247=noaccess -
RestrictAddressFamilies=~AF_PACKET
-
RuntimeDirectory=syncplay-server
-
Type=simple
-
-
[Unit]
-
After=network-online.target
-
Description=Server to host Syncplay rooms
-
Documentation=man:syncplay-server(1)
-
Wants=network-online.target
-
Additionnal notes
Nothing here.