ansible-roles/roles/penpot/templates/penpot-exporter.service.j2

34 lines
808 B
Django/Jinja

[Unit]
Description=Penpot exporter
After=syslog.target network.target
[Service]
Type=simple
User={{ penpot_user }}
WorkingDirectory={{ penpot_root_dir }}/exporter
Environment=PENPOT_HTTP_SERVER_PORT={{ penpot_ports['exporter'] }}
Environment=PENPOT_REDIS_URI={{ penpot_redis_url }}
ExecStart=/bin/node {{ penpot_root_dir }}/exporter/app.js
PrivateTmp=yes
NoNewPrivileges=true
Restart=on-failure
MemoryLimit=512M
SyslogIdentifier=penpot-exporter
Restart=on-failure
StartLimitInterval=0
RestartSec=30
PrivateDevices=true
ProtectControlGroups=true
ProtectHome=true
ProtectSystem=full
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
RestrictRealtime=true
RestrictNamespaces=true
ReadWritePaths=/run {{ penpot_root_dir }}/data
LockPersonality=true
[Install]
WantedBy=multi-user.target