support/systemd/peertube.service

   1 [Unit]
   2 Description=PeerTube daemon
   3 After=network.target postgresql.service redis-server.service
   4
   5 [Service]
   6 Type=simple
   7 Environment=NODE_ENV=production
   8 Environment=NODE_CONFIG_DIR=/var/www/peertube/config
   9 User=peertube
  10 Group=peertube
  11 ExecStart=/usr/bin/npm start
  12 WorkingDirectory=/var/www/peertube/peertube-latest
  13 StandardOutput=syslog
  14 StandardError=syslog
  15 SyslogIdentifier=peertube
  16 Restart=always
  17
  18 ; Some security directives.
  19 ; Use private /tmp and /var/tmp folders inside a new file system namespace,
  20 ; which are discarded after the process stops.
  21 PrivateTmp=true
  22 ; Mount /usr, /boot, and /etc as read-only for processes invoked by this service.
  23 ProtectSystem=full
  24 ; Sets up a new /dev mount for the process and only adds API pseudo devices
  25 ; like /dev/null, /dev/zero or /dev/random but not physical devices. Disabled
  26 ; by default because it may not work on devices like the Raspberry Pi.
  27 PrivateDevices=false
  28 ; Ensures that the service process and all its children can never gain new
  29 ; privileges through execve().
  30 NoNewPrivileges=true
  31
  32 [Install]
  33 WantedBy=multi-user.target