GenZmeY
4b05ded66c
- based for systemd service with inotify; - group and permissions can be set in kf2-srv.conf; - bot password in separate conf with no permissions for others.
20 lines
851 B
Desktop File
20 lines
851 B
Desktop File
[Unit]
|
|
Description=kf2-srv force attr service
|
|
|
|
[Service]
|
|
Type=simple
|
|
StandardOutput=null
|
|
StandardError=null
|
|
EnvironmentFile=/etc/kf2-srv/kf2-srv.conf
|
|
ExecStart=/bin/bash -c 'declare -a DiffNames WaveNames; declare -A ModeNames MutNames; source /etc/kf2-srv/kf2-srv.conf; /usr/bin/inotifywait -qmr -e create -e moved_to --format %w%f /var/log/kf2-srv /var/log/kf2-srv-beta /etc/kf2-srv/instances /etc/kf2-srv/instances-beta | while read File; do if echo "${File}" | grep -Piq "\.log$"; then chmod "${ForceLogPermissions}" "${File}"; chown :"${ForceLogGroup}" "${File}"; elif echo "${File}" | grep -Piq "\.ini$"; then chmod "${ForceIniPermissions}" "${File}"; chown :"${ForceIniGroup}" "${File}"; fi; done'
|
|
Restart=always
|
|
|
|
NoNewPrivileges=yes
|
|
PrivateTmp=true
|
|
PrivateDevices=true
|
|
ProtectHome=true
|
|
ProtectSystem=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|