Update init examples

This commit is contained in:
dwrz
2026-10-09 15:49:55 +00:00
parent 550f257760
commit fd24c1f33f
2 changed files with 35 additions and 18 deletions
+14 -8
View File
@@ -1,19 +1,25 @@
[Unit]
Description=odidere
After=network.target whisper.service kokoro.service
Requires=whisper.service kokoro.service
After=network.target
[Service]
ExecStart=%h/.local/bin/odidere -c %h/.config/odidere/config.yaml
Restart=on-failure
RestartSec=10
SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true
# These optional restrictions also apply to tool subprocesses.
# https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html
StartLimitIntervalSec=60
StartLimitBurst=4
# Restricts system calls to the native architecture. Tools that execute
# binaries for another ABI, such as 32-bit binaries, can fail.
# SystemCallArchitectures=native
# Blocks writable executable memory. Tool runtimes that generate machine
# code can fail under this restriction.
# MemoryDenyWriteExecute=true
# Prevents privilege gains through setuid executables or file capabilities.
# Tools that rely on those privilege gains can fail.
# NoNewPrivileges=true
[Install]
WantedBy=default.target