diff --git a/contrib/systemd/telemt.service b/contrib/systemd/telemt.service index 8e08efc..e2bae67 100644 --- a/contrib/systemd/telemt.service +++ b/contrib/systemd/telemt.service @@ -8,22 +8,14 @@ Type=simple User=telemt Group=telemt WorkingDirectory=/var/lib/telemt -ExecStart=/bin/telemt /etc/telemt/telemt.toml +ExecStart=/usr/bin/telemt /etc/telemt/telemt.toml Restart=on-failure RestartSec=10 LimitNOFILE=65536 AmbientCapabilities=CAP_NET_BIND_SERVICE CapabilityBoundingSet=CAP_NET_BIND_SERVICE NoNewPrivileges=true -PrivateTmp=yes -PrivateDevices=yes -ProtectKernelTunables=yes -ProtectKernelModules=yes -ProtectControlGroups=yes -ProtectSystem=strict -ProtectHome=read-only -SystemCallFilter=~@mount -ReadWritePaths=/var/lib/telemt + [Install] WantedBy=multi-user.target