Federated via graft
558 B
23 lines
1[Unit]
2Description=graft - Forgejo <-> Radicle sync daemon
3After=network-online.target
4Wants=network-online.target
5
6[Service]
7Type=simple
8User=sync
9Group=sync
10ExecStart=/usr/local/bin/graft -config /etc/graft/config.yaml
11Restart=always
12RestartSec=10
13
14# Hardening: the daemon only needs its own state dir, its config dir (for
15# reading the token files) and the rad CLI's home directory.
16NoNewPrivileges=true
17ProtectSystem=strict
18ProtectHome=true
19ReadWritePaths=/var/lib/graft /home/sync/.radicle
20ReadOnlyPaths=/etc/graft
21
22[Install]
23WantedBy=multi-user.target