# Copyright (C) 2015-2018 Alsace RĂ©seau Neutre # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . # Debian GNU/Linux: store this in /etc/systemd/system/ [Unit] Description=BIRD Looking-Glass service [Service] Type=simple # # User and group to run as # User={{ bird_lg_user }} Group={{ bird_lg_group }} # # Service Hardening # #ProtectSystem=strict #NoNewPrivileges=yes #ProtectControlGroups=yes #PrivateTmp=yes #PrivateDevices=yes #DevicePolicy=closed #MemoryDenyWriteExecute=yes #AmbientCapabilities=CAP_NET_BIND_SERVICE #CapabilityBoundingSet=CAP_NET_BIND_SERVICE ## Change this to match LOG_FILE from the .cfg file #ReadWritePaths={{ bird_lg_log_path }}/lg.log #ReadWritePaths={{ bird_lg_install_path }} # ExecStart={{ bird_lg_install_path }}/.venv/bin/python {{ bird_lg_install_path }}/lg.py Restart=on-failure [Install] WantedBy=multi-user.target