File navidrome.service of Package navidrome-hardened

Overview Repositories Revisions Requests Users Attributes Meta

File navidrome.service of Package navidrome-hardened

[Unit]
Description=Modern Music Server and Streamer compatible with Subsonic/Airsonic
After=remote-fs.target network.target
AssertPathExists=/etc/navidrome/navidrome.toml

[Service]
User=navidrome
Group=navidrome
DynamicUser=true
RestrictAddressFamilies=AF_INET AF_INET6
CapabilityBoundingSet=
RestrictNamespaces=true
PrivateDevices=true
DevicePolicy=closed
NoNewPrivileges=true
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectProc=invisible
ProcSubset=pid
ProtectSystem=strict
RestrictSUIDSGID=true
SystemCallArchitectures=native
RestrictRealtime=true
LockPersonality=true
MemoryDenyWriteExecute=true
RemoveIPC=true
ProtectHostname=true
SystemCallFilter=@system-service
SystemCallFilter=~@resources @privileged
SystemCallFilter=setrlimit
UMask=0066
StateDirectory=navidrome
CacheDirectory=navidrome
WorkingDirectory=/var/lib/navidrome
ExecStart=/usr/bin/navidrome --configfile /etc/navidrome/navidrome.toml

[Install]
WantedBy=multi-user.target

Places

File navidrome.service of Package navidrome-hardened

Places