Browse Source

Updated gogs.service

pull/3802/head
Sebastian 8 years ago committed by GitHub
parent
commit
24d31fda8b
  1. 14
      scripts/systemd/gogs.service

14
scripts/systemd/gogs.service

@ -9,13 +9,13 @@ After=network.target
#After=redis.service #After=redis.service
[Service] [Service]
Restart=on-failure Restart=always
; User and group the process will run as. ; User and group the process will run as.
User=git User=git
Group=git Group=git
; Gogs directoryies. ; Gogs directories.
Environment=USER=git HOME=/home/git Environment=USER=git HOME=/home/git
WorkingDirectory=/home/git/gogs WorkingDirectory=/home/git/gogs
@ -31,15 +31,9 @@ PrivateTmp=true
; Use a minimal /dev ; Use a minimal /dev
PrivateDevices=true PrivateDevices=true
; Hide /home, /root, and /run/user. Nobody will steal your SSH-keys. ; Mount /usr, /boot, /etc folders read-only.
ProtectHome=true
; Make /usr, /boot, /etc and possibly some more folders read-only.
ProtectSystem=full ProtectSystem=full
; Make our directory writable
ReadWriteDirectories=/home/git
; Drop all other capabilities. Important if you run gogs as privileged user (which you should not). ; Drop all other capabilities. Important if you run gogs as privileged user (which you should not).
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CapabilityBoundingSet=CAP_NET_BIND_SERVICE

Loading…
Cancel
Save