sueta / deploy / sueta-signal.service
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
[Unit]
Description=sueta blind signaling relay + TURN credential minter
After=network-online.target
Wants=network-online.target

[Service]
ExecStart=/usr/local/bin/sueta-signal
EnvironmentFile=/etc/sueta-signal.env
DynamicUser=yes
StateDirectory=sueta-signal
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes
Restart=always
RestartSec=3

[Install]
WantedBy=multi-user.target