mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2025-01-18 08:06:16 +01:00
a2510bcc95
This reverts commit 6d5a8767b40fd75261e43ae5dbdac7dc972340ba. Let's try to find out the real reason first. Plus, this might not have worked well, as the default systemd restart time limit would not catch repeated restarts.
41 lines
857 B
Django/Jinja
41 lines
857 B
Django/Jinja
[Unit]
|
|
Description=Gitlab Exporter
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
StandardOutput=journal+console
|
|
EnvironmentFile=-/etc/conf.d/gitlab-exporter
|
|
User=node_exporter
|
|
ExecStart=/usr/bin/gitlab-exporter -o {{ prometheus_textfile_dir }}/gitlab-exporter.prom cli
|
|
|
|
NoNewPrivileges=true
|
|
LockPersonality=true
|
|
CapabilityBoundingSet=
|
|
UMask=077
|
|
|
|
PrivateDevices=true
|
|
PrivateTmp=true
|
|
ProtectSystem=strict
|
|
ProtectHome=true
|
|
ReadWritePaths={{ prometheus_textfile_dir }}
|
|
|
|
MemoryDenyWriteExecute=true
|
|
RemoveIPC=true
|
|
RestrictRealtime=true
|
|
RestrictNamespaces=true
|
|
RestrictSUIDSGID=true
|
|
|
|
RestrictAddressFamilies=~AF_NETLINK
|
|
RestrictAddressFamilies=~AF_PACKET
|
|
|
|
ProtectHostname=true
|
|
ProtectControlGroups=true
|
|
ProtectKernelLogs=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectClock=true
|
|
|
|
SystemCallArchitectures=native
|