|
@@ -0,0 +1,25 @@
|
|
|
|
|
+[Unit]
|
|
|
|
|
+Description=Gogs
|
|
|
|
|
+After=syslog.target
|
|
|
|
|
+After=network.target
|
|
|
|
|
+After=mariadb.service
|
|
|
|
|
+
|
|
|
|
|
+[Service]
|
|
|
|
|
+Type=simple
|
|
|
|
|
+User=git
|
|
|
|
|
+Group=git
|
|
|
|
|
+WorkingDirectory=/opt/gogs
|
|
|
|
|
+ExecStart=/opt/gogs/gogs web
|
|
|
|
|
+Restart=always
|
|
|
|
|
+Environment=USER=git HOME=/opt/gogs
|
|
|
|
|
+AmbientCapabilities=CAP_NET_BIND_SERVICE
|
|
|
|
|
+
|
|
|
|
|
+# Some distributions may not support these hardening directives. If you cannot start th>
|
|
|
|
|
+# to an unknown option, comment out the ones not supported by your version of systemd.
|
|
|
|
|
+#ProtectSystem=full
|
|
|
|
|
+#PrivateDevices=yes
|
|
|
|
|
+PrivateTmp=yes
|
|
|
|
|
+NoNewPrivileges=true
|
|
|
|
|
+
|
|
|
|
|
+[Install]
|
|
|
|
|
+WantedBy=multi-user.target
|
