sum7
/
ejabberd-tools
2
1
Fork 0
Code Issues 1 Pull Requests 1 Projects 1 Releases Wiki Activity
ejabberd-tools/contrib/init/linux-systemd/ejabberd-influxdb.service

25 lines
575 B
SYSTEMD
Raw Normal View History

final touches # added + add method to escape whitespaces in keys and values # changed * init client handler only once and not every time * don't try to create database on every run just on the first one # removed - vhosts are listed first and after that the respective nodes are listed
2019-10-24 20:31:49 +02:00
[Unit]
further documentation + add systemd service documentation
2020-06-10 00:56:43 +02:00
Description=ejabberd influxdb exporter
systemd service hardening + add systemd protective features to restrict the system access + add service documentation link + add service required / after fields
2020-06-10 12:00:12 +02:00
Documentation=https://dev.sum7.eu/sum7/ejabberd-tools/-/blob/master/README.md
clarify documentation * align url parameter to the ejabberd example * update virtualenv command * remove influxdb service requirement from service template
2020-06-10 21:35:57 +02:00
Requires=ejabberd.service
final touches # added + add method to escape whitespaces in keys and values # changed * init client handler only once and not every time * don't try to create database on every run just on the first one # removed - vhosts are listed first and after that the respective nodes are listed
2019-10-24 20:31:49 +02:00
[Service]
Type=simple
User=nobody
systemd compliance + add possibility to customize db name via config file + file path configurations are dealt with dynamically * at least Debian does not feature a group called nobody it is called nogroup I am not sure if other systems feature a group called nobody.
2019-12-07 14:48:25 +01:00
Group=nogroup
systemd: add support for venv and cleanup
2020-06-10 07:28:10 +02:00
Environment="PATH=/opt/ejabberd-tools/venv/bin:/usr/local/bin:/usr/bin:/bin"
ExecStart=/opt/ejabberd-tools/influx.py
WorkingDirectory=/opt/ejabberd-tools/
systemd service hardening + add systemd protective features to restrict the system access + add service documentation link + add service required / after fields
2020-06-10 12:00:12 +02:00
PrivateDevices=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=yes
ProtectSystem=full
NoNewPrivileges=yes
final touches # added + add method to escape whitespaces in keys and values # changed * init client handler only once and not every time * don't try to create database on every run just on the first one # removed - vhosts are listed first and after that the respective nodes are listed
2019-10-24 20:31:49 +02:00
Restart=always
RestartSec=5s
[Install]
WantedBy=multi-user.target