Cyber/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Harden kanboard cron service

Browse source
This commit is contained in:
Jelle van der Waa 2019-01-19 21:27:06 +01:00
parent 342d27bd5c
commit fc8011de2e
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
roles/kanboard/templates/kanboard-cron.service
View file

@ -6,3 +6,12 @@ User=kanboard
Type=oneshot
WorkingDirectory={{kanboard_dir}}
ExecStart=/usr/bin/php ./cli cron
NoNewPrivileges=true
TimeoutStartSec=3600
ProtectHome=true
ProtectSystem=full
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true