1
1
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2025-01-18 08:06:16 +01:00
infrastructure/roles/bugbot/files/bugbot.service
Jelle van der Waa d9377b5e5b
Add bugbot role to phrik.archlinux.org
Apply more security hardening, add pgp key fetching and verification for
the git repository.
2020-07-11 22:06:35 +02:00

23 lines
435 B
SYSTEMD

[Unit]
Description=The official Arch Linux IRC bugbot
[Service]
EnvironmentFile=/srv/bugbot/env
ExecStart=/srv/bugbot/bugbot.py
Restart=on-failure
ProtectSystem=strict
DynamicUser=yes
PrivateDevices=true
PrivateUsers=true
ProtectKernelTunables=true
ProtectControlGroups=true
ProtectKernelLogs=true
ProtectKernelModules=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
RestrictRealtime=true
[Install]
WantedBy=multi-user.target