rhi@.service (1302B)
1 [Unit] 2 Description=Radroots RHI evidence service instance %i 3 After=network-online.target 4 Wants=network-online.target 5 StartLimitIntervalSec=0 6 7 [Service] 8 Type=simple 9 User=rhi 10 Group=rhi 11 UMask=0077 12 ExecStart=/usr/bin/rhi --profile service-host --instance %i run 13 Restart=on-failure 14 RestartSec=5s 15 RestartPreventExitStatus=2 4 5 6 16 TimeoutStopSec=310s 17 KillSignal=SIGTERM 18 FinalKillSignal=SIGKILL 19 ConfigurationDirectory=radroots/services/rhi/%i 20 ConfigurationDirectoryMode=0700 21 StateDirectory=radroots/services/rhi/%i 22 StateDirectoryMode=0700 23 CacheDirectory=radroots/services/rhi/%i 24 CacheDirectoryMode=0700 25 LogsDirectory=radroots/services/rhi/%i 26 LogsDirectoryMode=0700 27 RuntimeDirectory=radroots/services/rhi/%i 28 RuntimeDirectoryMode=0700 29 RuntimeDirectoryPreserve=restart 30 NoNewPrivileges=yes 31 PrivateTmp=yes 32 PrivateDevices=yes 33 ProtectHome=yes 34 ProtectSystem=strict 35 ProtectClock=yes 36 ProtectControlGroups=yes 37 ProtectHostname=yes 38 ProtectKernelLogs=yes 39 ProtectKernelModules=yes 40 ProtectKernelTunables=yes 41 ProtectProc=invisible 42 ProcSubset=pid 43 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 44 RestrictNamespaces=yes 45 RestrictRealtime=yes 46 RestrictSUIDSGID=yes 47 LockPersonality=yes 48 CapabilityBoundingSet= 49 AmbientCapabilities= 50 KeyringMode=private 51 RemoveIPC=yes 52 SystemCallArchitectures=native 53 54 [Install] 55 WantedBy=multi-user.target