scripts: apply hardening for systemd service (#5332)

pull/5306/head
Bogdan Khomutsky 2018-07-09 11:13:28 +03:00 committed by 无闻
parent 8bbf0293f5
commit 66016b8499
1 changed files with 4 additions and 0 deletions

View File

@ -18,6 +18,10 @@ WorkingDirectory=/home/git/gogs
ExecStart=/home/git/gogs/gogs web
Restart=always
Environment=USER=git HOME=/home/git
# Hardening
ProtectSystem=full
PrivateDevices=yes
PrivateTmp=yes
[Install]
WantedBy=multi-user.target