[Unit] Description=Shortened URLs service job queue Documentation=https://framagit.org/fiat-tux/hat-softwares/lstu [Service] Type=simple User={{ lstu_user }} WorkingDirectory={{ lstu.path }} ExecStart=/usr/bin/carton exec script/application minion worker # Hardening CapabilityBoundingSet= PrivateMounts=true PrivateTmp=true ProtectControlGroups=true ProtectHome=true ProtectSystem=strict ReadWritePaths=-{{ lstu.path }} [Install] WantedBy=multi-user.target