mirror of
https://github.com/ElementsProject/elements.git
synced 2026-08-14 12:43:40 +02:00
init: update the elementsd.service file with some additions found in last Bitcoin Core version, ie PermissionsStartONly=true, ExecStartPre=/bin/chgrp elements /etc/elements, TimeoutStopSec=600 and ProtectHome=true
This commit is contained in:
parent
c884cadc71
commit
536939e5ed
1 changed files with 27 additions and 18 deletions
|
|
@ -1,47 +1,53 @@
|
|||
# It is not recommended to modify this file in-place, because it will
|
||||
# be overwritten during package upgrades. If you want to add further
|
||||
# options or overwrite existing ones then use
|
||||
# $ systemctl edit bitcoind.service
|
||||
# $ systemctl edit elementsd.service
|
||||
# See "man systemd.service" for details.
|
||||
|
||||
# Note that almost all daemon options could be specified in
|
||||
# /etc/bitcoin/bitcoin.conf, except for those explicitly specified as arguments
|
||||
# in ExecStart=
|
||||
# /etc/elements/elements.conf, but keep in mind those explicitly
|
||||
# specified as arguments in ExecStart= will override those in the
|
||||
# config file.
|
||||
|
||||
[Unit]
|
||||
Description=Bitcoin daemon
|
||||
Description=Elements daemon
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
ExecStart=/usr/bin/bitcoind -daemon \
|
||||
-pid=/run/bitcoind/bitcoind.pid \
|
||||
-conf=/etc/bitcoin/bitcoin.conf \
|
||||
-datadir=/var/lib/bitcoind
|
||||
ExecStart=/usr/bin/elementsd -daemon \
|
||||
-pid=/run/elementsd/elementsd.pid \
|
||||
-conf=/etc/elements/elements.conf \
|
||||
-datadir=/var/lib/elementsd
|
||||
|
||||
# Make sure the config directory is readable by the service user
|
||||
PermissionsStartOnly=true
|
||||
ExecStartPre=/bin/chgrp elements /etc/elements
|
||||
|
||||
# Process management
|
||||
####################
|
||||
|
||||
Type=forking
|
||||
PIDFile=/run/bitcoind/bitcoind.pid
|
||||
PIDFile=/run/elementsd/elementsd.pid
|
||||
Restart=on-failure
|
||||
TimeoutStopSec=600
|
||||
|
||||
# Directory creation and permissions
|
||||
####################################
|
||||
|
||||
# Run as bitcoin:bitcoin
|
||||
User=bitcoin
|
||||
Group=bitcoin
|
||||
# Run as elements:elements
|
||||
User=elements
|
||||
Group=elements
|
||||
|
||||
# /run/bitcoind
|
||||
RuntimeDirectory=bitcoind
|
||||
# /run/elementsd
|
||||
RuntimeDirectory=elementsd
|
||||
RuntimeDirectoryMode=0710
|
||||
|
||||
# /etc/bitcoin
|
||||
ConfigurationDirectory=bitcoin
|
||||
# /etc/elements
|
||||
ConfigurationDirectory=elements
|
||||
ConfigurationDirectoryMode=0710
|
||||
|
||||
# /var/lib/bitcoind
|
||||
StateDirectory=bitcoind
|
||||
# /var/lib/elementsd
|
||||
StateDirectory=elementsd
|
||||
StateDirectoryMode=0710
|
||||
|
||||
# Hardening measures
|
||||
|
|
@ -53,6 +59,9 @@ PrivateTmp=true
|
|||
# Mount /usr, /boot/ and /etc read-only for the process.
|
||||
ProtectSystem=full
|
||||
|
||||
# Deny access to /home, /root and /run/user
|
||||
ProtectHome=true
|
||||
|
||||
# Disallow the process and all of its children to gain
|
||||
# new privileges through execve().
|
||||
NoNewPrivileges=true
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue