highperfocused/raspiblitz
1
0
Fork 0
mirror of https://github.com/raspiblitz/raspiblitz.git synced 2025-09-21 14:11:06 +02:00
Code Issues Packages Projects Releases Wiki Activity

add hardening measures to systemd services

Browse Source
This commit is contained in:
openoms
2021-05-23 16:46:29 +01:00
parent ca82d221de
commit ab279c7d10
4 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
home.admin/config.scripts/bonus.clnrest.sh
View File

@@ -79,6 +79,12 @@ Restart=always
TimeoutSec=120 TimeoutSec=120
RestartSec=30 RestartSec=30
# Hardening measures
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
PrivateDevices=true
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target
" | sudo tee /etc/systemd/system/clnrest.service " | sudo tee /etc/systemd/system/clnrest.service

6
home.admin/config.scripts/cln.install.sh
View File

@@ -185,6 +185,12 @@ RestartSec=30
StandardOutput=null StandardOutput=null
StandardError=journal StandardError=journal
# Hardening measures
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
PrivateDevices=true
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target
" | sudo tee /etc/systemd/system/${prefix}lightningd.service " | sudo tee /etc/systemd/system/${prefix}lightningd.service

6
home.admin/config.scripts/lnd.chain.sh
View File

@@ -149,6 +149,12 @@ RestartSec=30
StandardOutput=null StandardOutput=null
StandardError=journal StandardError=journal
# Hardening measures
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
PrivateDevices=true
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target
" | sudo tee /etc/systemd/system/${prefix}lnd.service " | sudo tee /etc/systemd/system/${prefix}lnd.service

6
home.admin/config.scripts/network.bitcoinchains.sh
View File

@@ -132,6 +132,12 @@ RestartSec=30
StandardOutput=null StandardOutput=null
StandardError=journal StandardError=journal
# Hardening measures
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
PrivateDevices=true
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target
" | sudo tee /etc/systemd/system/${prefix}bitcoind.service " | sudo tee /etc/systemd/system/${prefix}bitcoind.service