eg25-manager: set RestartSec to make the restart loops less painful

This commit is contained in:
2023-08-16 09:09:13 +00:00
parent 6751a74063
commit 4ec947d549

View File

@@ -30,18 +30,20 @@ in
''; '';
Restart = "on-failure"; Restart = "on-failure";
RestartSec = "60s"; # can make this more frequent once stable?
# sandboxing (taken from the service file shipped by eg25-manager): # sandboxing (taken from the service file shipped by eg25-manager):
ProtectControlGroups = true; # TODO: this is too strict and breaks access to e.g. /dev/ttyUSB2!
ProtectHome = true; # ProtectControlGroups = true;
ProtectSystem = "strict"; # ProtectHome = true;
RestrictSUIDSGID = true; # ProtectSystem = "strict";
PrivateTmp = true; # RestrictSUIDSGID = true;
MemoryDenyWriteExecute = true; # PrivateTmp = true;
PrivateMounts = true; # MemoryDenyWriteExecute = true;
NoNewPrivileges = true; # PrivateMounts = true;
CapabilityBoundingSet = [ "" ]; # NoNewPrivileges = true;
LockPersonality = true; # CapabilityBoundingSet = [ "" ];
# LockPersonality = true;
}; };
before = [ "ModemManager.service" ]; before = [ "ModemManager.service" ];
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];