From 0a51758df8c74fd65b449230e8ec214b0b58ef8c Mon Sep 17 00:00:00 2001 From: Rory& Date: Tue, 3 Jun 2025 19:18:04 +0200 Subject: Add systemd example --- doc/systemd.service | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 doc/systemd.service (limited to 'doc/systemd.service') diff --git a/doc/systemd.service b/doc/systemd.service new file mode 100644 index 0000000..37a98ca --- /dev/null +++ b/doc/systemd.service @@ -0,0 +1,30 @@ +[Unit] +After=network.target mongodb.service +Description=SafeNSound Service +Requires=mongodb.service + +[Service] +Environment="DATABASE_SECRET_PATH=/run/credentials/safensound.service/mongodb" +Environment="JWT_SECRET_PATH=/var/lib/SafeNSound" +Environment="LOG_AUTH=true" +Environment="LOG_QUERIES=true" +Environment="LOG_REQUESTS=-" +Environment="PORT=7645" +DynamicUser=true +ExecStart=/usr/bin/env node /opt/SafeNSound +LoadCredential=mongodb:/data/secrets/safensound-mongodb +NoNewPrivileges=true +PrivateDevices=true +PrivateTmp=true +ProtectHome=true +ProtectSystem=strict +Restart=always +StartLimitBurst=600 +StartLimitIntervalSec=60 +StateDirectory=SafeNSound +StateDirectoryMode=0700 +Type=simple +WorkingDirectory=/var/lib/SafeNSound + +[Install] +WantedBy=multi-user.target -- cgit 1.5.1