Wants=postgresql@9.4-main.service
After=postgresql@9.4-main.service
Conflicts=gigi-standalone.service
+PartOf=gigi-proxy.socket
[Service]
ExecStart=/usr/bin/java -cp /usr/share/java/postgresql-jdbc4.jar:/usr/share/java/gigi.jar org.cacert.gigi.Launcher /etc/cacert/gigi/conf.tar
ProtectSystem=full
ProtectHome=yes
NoNewPrivileges=yes
+SystemCallArchitectures=native
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictRealtime=yes
[Install]
WantedBy=multi-user.target