python-game-server/gameserver.service at main · feberts/python-game-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
[Unit]
Description=Python game server

After=network.target

[Service]
ExecStart=/usr/bin/python3 -u /home/gameserver/python-game-server/server/game_server.py
Restart=always

StandardOutput=append:/var/log/gameserver.log
StandardError=inherit

User=gameserver
Group=gameserver

ProtectSystem=strict
ProtectHome=tmpfs
PrivateTmp=yes
PrivateDevices=yes
TemporaryFileSystem=/srv:ro
TemporaryFileSystem=/var:ro
TemporaryFileSystem=/opt:ro
TemporaryFileSystem=/mnt:ro
TemporaryFileSystem=/boot:ro
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
SystemCallFilter=@system-service
SystemCallErrorNumber=EPERM
CapabilityBoundingSet=
NoNewPrivileges=yes
MemoryDenyWriteExecute=true

BindReadOnlyPaths=/home/gameserver/python-game-server/server

[Install]
WantedBy=multi-user.target