mirror of
https://github.com/fankes/beszel.git
synced 2025-10-18 17:29:28 +08:00
31 lines
639 B
Desktop File
31 lines
639 B
Desktop File
[Unit]
|
|
Description=Beszel Agent Service
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
|
|
[Service]
|
|
Environment="PORT=45876"
|
|
# Port number can be overridden in beszel-agent.conf if needed
|
|
EnvironmentFile=/etc/beszel-agent.conf
|
|
ExecStart=/usr/bin/beszel-agent
|
|
User=beszel
|
|
Restart=on-failure
|
|
StateDirectory=beszel-agent
|
|
|
|
# Security/sandboxing settings
|
|
KeyringMode=private
|
|
LockPersonality=yes
|
|
NoNewPrivileges=yes
|
|
PrivateTmp=yes
|
|
ProtectClock=yes
|
|
ProtectHome=read-only
|
|
ProtectHostname=yes
|
|
ProtectKernelLogs=yes
|
|
ProtectSystem=strict
|
|
RemoveIPC=yes
|
|
RestrictSUIDSGID=true
|
|
SystemCallArchitectures=native
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|