Harden a bit the systemd unit.

This commit is contained in:
jvoisin 2020-11-15 14:17:40 +00:00 committed by GitHub
parent 999e6d3d42
commit faa57b2081
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 0 deletions

View File

@ -76,6 +76,14 @@ WorkingDirectory=${JACKETT_DIR}
ExecStart=/bin/sh "${JACKETT_DIR}/jackett_launcher.sh"
TimeoutStopSec=30
ProtectHome=yes
ProtectSystem=full
PrivateTmp=yes
NoNewPrivileges=yes
ProtectDevices=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
[Install]
WantedBy=multi-user.target