Files
Jelle van der Waa d9377b5e5b Add bugbot role to phrik.archlinux.org
Apply more security hardening, add pgp key fetching and verification for
the git repository.
2020-07-11 22:06:35 +02:00

23 lines
435 B
SYSTEMD

[Unit]
Description=The official Arch Linux IRC bugbot
[Service]
EnvironmentFile=/srv/bugbot/env
ExecStart=/srv/bugbot/bugbot.py
Restart=on-failure
ProtectSystem=strict
DynamicUser=yes
PrivateDevices=true
PrivateUsers=true
ProtectKernelTunables=true
ProtectControlGroups=true
ProtectKernelLogs=true
ProtectKernelModules=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
RestrictRealtime=true
[Install]
WantedBy=multi-user.target