Smail/deploy/systemd/smail.service
smail 18896997df
Some checks are pending
Security Checks / security (push) Waiting to run
修复初始化端口持久化和系统服务权限
2026-08-31 21:00:38 +08:00

29 lines
656 B
Desktop File

[Unit]
Description=Smail 邮件服务
After=network-online.target
Wants=network-online.target
[Service]
Type=simple
User=smail
Group=smail
EnvironmentFile=/etc/smail/smail.env
WorkingDirectory=/var/lib/smail
ExecStart=/usr/local/lib/smail/smail
Restart=on-failure
RestartSec=5s
RuntimeDirectory=smail
RuntimeDirectoryMode=0750
# 目录由 smail 进程拥有,允许主服务创建受保护的本机控制套接字。
NoNewPrivileges=true
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
PrivateTmp=true
ProtectHome=true
ProtectSystem=full
ReadWritePaths=/var/lib/smail /run/smail
[Install]
WantedBy=multi-user.target