add LogDir, ProtectSystem=yes and capabilities to bind ports

This commit is contained in:
lod 2024-10-21 17:50:05 +02:00
parent 70772806c8
commit a42bb63039

View file

@ -8,11 +8,12 @@ Type=forking
ExecStart=/usr/bin/ncam -b ExecStart=/usr/bin/ncam -b
User=ncam User=ncam
ConfigurationDirectory=ncam ConfigurationDirectory=ncam
LogsDirectory=ncam
PrivateTmp=yes PrivateTmp=yes
ProtectHome=yes ProtectHome=yes
ProtectSystem=strict ProtectSystem=yes
NoNewPrivileges=yes NoNewPrivileges=yes
ReadWritePaths=-/var/lib/ncam AmbientCapabilities=CAP_NET_BIND_SERVICE
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target