mi
32 lines
821 B
Desktop File
32 lines
821 B
Desktop File
[Unit]
|
|
Description=HAN Processing VM2 root Compose stack
|
|
Requires=docker.service han-secrets-vm2.service han-kesl-scan-broker.socket
|
|
After=docker.service han-secrets-vm2.service han-kesl-scan-broker.socket network-online.target
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
User=root
|
|
Group=root
|
|
WorkingDirectory=/opt/han-chat/services
|
|
ExecStart=/usr/local/sbin/han-vm2-compose up -d --remove-orphans
|
|
ExecReload=/usr/local/sbin/han-vm2-compose up -d --remove-orphans
|
|
ExecStop=/usr/local/sbin/han-vm2-compose stop
|
|
TimeoutStartSec=300
|
|
TimeoutStopSec=120
|
|
UMask=0077
|
|
NoNewPrivileges=yes
|
|
PrivateTmp=yes
|
|
ProtectHome=yes
|
|
ProtectKernelTunables=yes
|
|
ProtectKernelModules=yes
|
|
ProtectKernelLogs=yes
|
|
ProtectControlGroups=yes
|
|
RestrictRealtime=yes
|
|
RestrictSUIDSGID=yes
|
|
LockPersonality=yes
|
|
LimitCORE=0
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|