summaryrefslogtreecommitdiffstats
path: root/files/etc/systemd/system/webmap-download@.service
diff options
context:
space:
mode:
Diffstat (limited to 'files/etc/systemd/system/webmap-download@.service')
-rw-r--r--files/etc/systemd/system/webmap-download@.service7
1 files changed, 4 insertions, 3 deletions
diff --git a/files/etc/systemd/system/webmap-download@.service b/files/etc/systemd/system/webmap-download@.service
index a928a13..c0e826f 100644
--- a/files/etc/systemd/system/webmap-download@.service
+++ b/files/etc/systemd/system/webmap-download@.service
@@ -8,7 +8,7 @@ Upholds=webmap-update@%i.target
[Service]
User=_webmap-download
-Group=nogroup
+Group=_webmap
Nice=15
IOSchedulingClass=idle
@@ -21,6 +21,9 @@ ExecStart=/usr/local/bin/webmap-download \
--quiet \
-- %I
+RuntimeDirectory=webmap-download
+RuntimeDirectoryPreserve=yes
+
# Hardening
NoNewPrivileges=yes
ProtectHome=yes
@@ -31,8 +34,6 @@ ProtectKernelModules=yes
ProtectKernelTunables=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
ReadWritePaths=/var/cache/webmap
-RuntimeDirectory=webmap-download
-RuntimeDirectoryPreserve=yes
[Install]
WantedBy=webmap-update@%i.target