diff --git a/src/debian/aprsc@.service b/src/debian/aprsc@.service new file mode 100644 index 0000000..1d6c730 --- /dev/null +++ b/src/debian/aprsc@.service @@ -0,0 +1,34 @@ +[Unit] +Description="APRS-IS server #%i" +After=network.target +Documentation=http://he.fi/aprsc/, man:aprsc(8) + +[Service] +Type=simple +ExecStartPre=/opt/aprsc/sbin/aprsc-prepare-chroot.sh +ExecStart=/opt/aprsc/sbin/aprsc -n aprsc-%i -u aprsc -t /opt/aprsc -e info -o file -r logs -c etc/aprsc-%i.conf +PIDFile=/opt/aprsc/logs/aprsc-%i.pid +TimeoutStopSec=5 +Restart=always +User=root +Group=root +LimitNOFILE=65535 +#PrivateDevices=yes +#ProtectHome=yes +#ReadOnlyDirectories=/ +#ReadWriteDirectories=-/var/lib/aprsc + +#NoNewPrivileges=true +#CapabilityBoundingSet=CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE +MemoryDenyWriteExecute=true +ProtectKernelModules=true +ProtectKernelTunables=true +ProtectControlGroups=true +RestrictRealtime=true +RestrictNamespaces=true +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +ProtectSystem=true +#ReadWriteDirectories=-/etc/aprsc + +[Install] +WantedBy=multi-user.target diff --git a/src/debian/compat b/src/debian/compat index ec63514..b4de394 100644 --- a/src/debian/compat +++ b/src/debian/compat @@ -1 +1 @@ -9 +11 diff --git a/src/debian/rules b/src/debian/rules index abdce79..8a6df72 100755 --- a/src/debian/rules +++ b/src/debian/rules @@ -74,7 +74,8 @@ binary-arch: build install # dh_installpam # dh_installmime # dh_python - dh_installinit # done manually with liveupgrade support + dh_installinit + dh_installsystemd # dh_installcron # dh_installinfo dh_installman