Skip to content
Snippets Groups Projects
Select Git revision
  • 4a1ace361013f00598fe0f0258c4311c4654a1b3
  • develop default protected
  • ical-export
  • feature/audit_log
  • fix/index
  • badge-redeem-404
  • 720-schedule_source
  • room-docu
  • chore/event-views
  • 511-schedule-foo-fixed
  • 607-schedule-versions
  • deploy/curl-verbose
  • fix/public-badge-access-rights
  • 445-schedule-redirects
  • 623-wiki-im-baustellenmodus-sollte-mal-als-wiki-admin-trotzdem-seiten-anlegen-bearbeiten-konnen
  • fix/registration_mail_subject
  • feature/conference-query-set
  • feature/568-habitatmanagement
  • feat/unit-integration-tests
  • camp23-prod
  • production
  • prod-2024-12-27_20-15
  • prod-2024-12-27_16-37
  • prod-2024-12-27_16-01
  • prod-2024-12-27_13-29
  • prod-2024-12-27_00-34
  • prod-2024-12-26_21-45
  • prod-2024-12-26_13-12
  • prod-2024-12-26_00-21
  • prod-2024-12-25_21-04
  • prod-2024-12-25_15-54
  • prod-2024-12-25_01-29
  • prod-2024-12-24_14-48
  • prod-2024-12-23_23-39
  • prod-2024-12-22_21-12
  • prod-2024-12-22_17-25
  • prod-2024-12-22_01-34
  • prod-2024-12-22_00-55
  • prod-2024-12-21_13-42
  • prod-2024-12-21_10-44
  • prod-2024-12-20_12-25
41 results

teams.py

Blame
  • Forked from hub / hub
    Source project has a limited visibility.
    rocketchat-follower@.service 1.09 KiB
    [Unit]
    Description=RocketChat Server (follower, depending on main service)
    After=network.target
    Wants=network-online.target
    PartOf=rocketchat.service
    
    [Service]
    # Overwrite BIND_IP from config files with instance name. We cannot use
    # Environment for this, since EnvironmentFile takes precedence over it.
    ExecStart=env BIND_IP=%I /usr/bin/node /usr/share/rocketchat/bundle/main.js
    Restart=on-failure
    RestartSec=10
    ExecReload=/bin/kill -USR1 $MAINPID
    SyslogIdentifier=rocketchat
    
    Environment=NODE_ENV=production
    EnvironmentFile=/etc/rocketchat.conf
    EnvironmentFile=/etc/rocketchat-follower.conf
    
    DynamicUser=true
    PrivateUsers=true
    CapabilityBoundingSet=
    NoNewPrivileges=true
    RemoveIPC=true
    LockPersonality=true
    ProtectControlGroups=true
    ProtectKernelTunables=true
    ProtectKernelModules=true
    ProtectKernelLogs=true
    ProtectClock=true
    ProtectHostname=true
    ProtectProc=noaccess
    RestrictRealtime=true
    RestrictSUIDSGID=true
    RestrictNamespaces=true
    ProtectSystem=strict
    ProtectHome=true
    PrivateTmp=true
    PrivateDevices=true
    SystemCallArchitectures=native
    SystemCallFilter=@system-service
    
    [Install]
    WantedBy=rocketchat.service