upd: move external keywords to own class

[gigi.git] / debian / gigi-proxy.service

diff --git a/debian/gigi-proxy.service b/debian/gigi-proxy.service
index 88d18f755fb7baa0de14270f6f368762996cd25a..52eddbd714b982f598e158bf14a6596d7ca4a4d8 100644 (file)
--- a/debian/gigi-proxy.service
+++ b/debian/gigi-proxy.service
@@ -3,6 +3,7 @@ Description=Gigi Webserver module for ET
 Wants=postgresql@9.4-main.service
 After=postgresql@9.4-main.service
 Conflicts=gigi-standalone.service
+PartOf=gigi-proxy.socket
 
 [Service]
 ExecStart=/usr/bin/java -cp /usr/share/java/postgresql-jdbc4.jar:/usr/share/java/gigi.jar org.cacert.gigi.Launcher /etc/cacert/gigi/conf.tar
@@ -16,6 +17,9 @@ PrivateDevices=yes
 ProtectSystem=full
 ProtectHome=yes
 NoNewPrivileges=yes
+SystemCallArchitectures=native
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictRealtime=yes
 
 [Install]
 WantedBy=multi-user.target