bc0f261f72
* origin/develop: (207 commits) Update README.md Mastodon API: Fix list streaming nginx example config: remove CORS headers, now managed by CORSPlug. config: properly configure CORSPlug. oauth: fix token decode regression tests: add test for internal data stripping activitypub: transmogrifier: sanitize internal representation details from outgoing objects lib/mix/tasks: s/@doc/@moduledoc/ lib/mix/tasks/unsubscribe_user.ex: Fix syntax from bad line copy lib/mix/tasks: Add remaining documentation for mix tasks config/config.md: Add lines inspired/copied from CONFIGURATION.md README.md: Add note about config/config.md README.md: Put the systemd’s .service note to the relevant section README.md: Add note for OpenRC config/config.md: scope_options_enabled also addresses subject config/config.md: Fill all the blanks config/config.md: Complete it [WIP] config/config.md: Create Document the mix tasks in ex_doc instead Document mix tasks ...
27 lines
1,006 B
Desktop File
27 lines
1,006 B
Desktop File
[Unit]
|
|
Description=Pleroma social network
|
|
After=network.target postgresql.service
|
|
|
|
[Service]
|
|
User=pleroma
|
|
WorkingDirectory=/home/pleroma/pleroma
|
|
Environment="HOME=/home/pleroma"
|
|
Environment="MIX_ENV=prod"
|
|
ExecStart=/usr/local/bin/mix phx.server
|
|
ExecReload=/bin/kill $MAINPID
|
|
KillMode=process
|
|
Restart=on-failure
|
|
StandardOutput=journal
|
|
|
|
; Some security directives.
|
|
; Use private /tmp and /var/tmp folders inside a new file system namespace, which are discarded after the process stops.
|
|
PrivateTmp=true
|
|
; Mount /usr, /boot, and /etc as read-only for processes invoked by this service.
|
|
ProtectSystem=full
|
|
; Sets up a new /dev mount for the process and only adds API pseudo devices like /dev/null, /dev/zero or /dev/random but not physical devices. Disabled by default because it may not work on devices like the Raspberry Pi.
|
|
PrivateDevices=false
|
|
; Ensures that the service process and all its children can never gain new privileges through execve().
|
|
NoNewPrivileges=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|