aboutsummaryrefslogtreecommitdiff
path: root/newsboat/systemd/user/reload-newsboat.service
blob: 24cda4243987cae84c17dbd847e572b0c9a3bdb8 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
[Unit]
Description=fetch new Newsboat articles
OnFailure=notify-email@%n
ConditionPathExists=!%h/.local/share/newsboat/cache.db.lock

[Service]
Type=oneshot
LogsDirectory=newsboat
LogsDirectoryMode=0700
ExecStart=newsboat --execute=reload --log-file=%L/newsboat/%p.log --log-level=6
# Hardening
KeyringMode=private
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
RestrictAddressFamilies=AF_UNIX
RestrictAddressFamilies=~AF_UNIX
RestrictNamespaces=true
RestrictRealtime=true
SystemCallArchitectures=native
SystemCallErrorNumber=EPERM
SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources
UMask=0077
# Slowing
Nice=10
IOSchedulingClass=best-effort
IOSchedulingPriority=7