upd: move external keywords to own class

[gigi.git] / debian / gigi-proxy.service

diff --git a/debian/gigi-proxy.service b/debian/gigi-proxy.service
index 3708845d4069525a2ac6d43ce4e98ed00229ab2b..52eddbd714b982f598e158bf14a6596d7ca4a4d8 100644 (file)
--- a/debian/gigi-proxy.service
+++ b/debian/gigi-proxy.service
@@ -3,6 +3,7 @@ Description=Gigi Webserver module for ET
 Wants=postgresql@9.4-main.service
 After=postgresql@9.4-main.service
 Conflicts=gigi-standalone.service
+PartOf=gigi-proxy.socket
 
 [Service]
 ExecStart=/usr/bin/java -cp /usr/share/java/postgresql-jdbc4.jar:/usr/share/java/gigi.jar org.cacert.gigi.Launcher /etc/cacert/gigi/conf.tar
@@ -16,6 +17,10 @@ PrivateDevices=yes
 ProtectSystem=full
 ProtectHome=yes
 NoNewPrivileges=yes
+SystemCallArchitectures=native
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictRealtime=yes
 
 [Install]
 WantedBy=multi-user.target
+Also=gigi-proxy.socket