[Unit]
Description=Smail 超级管理员部署端重置
After=smail.service
Requisite=smail.service

[Service]
Type=oneshot
RemainAfterExit=no
User=root
Group=root
WorkingDirectory=/var/lib/smail
ExecStart=/usr/local/lib/smail/smail-admin
Restart=no
UMask=0077
NoNewPrivileges=true
PrivateTmp=true
PrivateNetwork=true
PrivateDevices=true
ProtectHome=true
ProtectSystem=strict
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictAddressFamilies=AF_UNIX
RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
LockPersonality=true
MemoryDenyWriteExecute=true
TimeoutStartSec=30s
TimeoutStopSec=5s