From b46d1fc97e8ba0304c539c5622a7cbde01d91130 Mon Sep 17 00:00:00 2001
From: Miquel Lionel <lionel@les-miquelots.net>
Date: Tue, 8 Jun 2021 13:47:16 +0100
Subject: systemd service is more robust. gzip manpages.

    - the curious thing is thaht in my honk-hg package zipman *does*
    gzip the manpages without problems, but not with
    extracted sources from tarballs like here?
---
 honk.service | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'honk.service')

diff --git a/honk.service b/honk.service
index 661030b..0d9d3ba 100644
--- a/honk.service
+++ b/honk.service
@@ -1,9 +1,20 @@
 [Unit]
 Description="Honk ActivityPub server"
+After=syslog.target network.target
+Requires=network.target
 
 [Service]
+Restart=always
+RestartSec=30
 WorkingDirectory=/usr/share/honk
 ExecStart=/usr/bin/honk
+NoNewPrivileges=yes
+ProtectKernelLogs=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectControlGroups=true
+ReadWritePaths=/usr/share/honk
+
 
 User=honk
 Group=honk
-- 
cgit v1.2.3-70-g09d2