File heisenbridge.service of Package heisenbridge

[Unit]
Description=Heisenbridge
After=syslog.target
After=network.target
After=matrix-synapse.service
Wants=matrix-synapse.service
Documentation=https://github.com/hifi/heisenbridge

[Service]
User=heisenbridge
Group=heisenbridge
Environment=TMPDIR=/var/lib/heisenbridge
EnvironmentFile=-/etc/sysconfig/heisenbridge
ExecStart=/usr/bin/heisenbridge --config=/etc/heisenbridge/registration.yaml --listen-address=${HEISENBRIDGE_LISTEN_ADDRESS} --listen-port=${HEISENBRIDGE_LISTEN_PORT} $HEISENBRIDGE_EXTRA_OPTIONS ${HEISENBRIDGE_HOMESERVER_URL}
# this can help with binding identd port
AmbientCapabilities=CAP_NET_BIND_SERVICE
LimitNOFILE=50000
PrivateTmp=true
# added automatically, for details please see
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=read-only
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
# end of automatic additions
Restart=always

[Install]
WantedBy=multi-user.target