upd: move external keywords to own class

[gigi.git] / debian / gigi-proxy.service

diff --git a/debian/gigi-proxy.service b/debian/gigi-proxy.service
index b4f41024bd34fe019f575a9cdb54a81f69789bae..52eddbd714b982f598e158bf14a6596d7ca4a4d8 100644 (file)
--- a/debian/gigi-proxy.service
+++ b/debian/gigi-proxy.service
@@ -17,6 +17,9 @@ PrivateDevices=yes
 ProtectSystem=full
 ProtectHome=yes
 NoNewPrivileges=yes
+SystemCallArchitectures=native
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictRealtime=yes
 
 [Install]
 WantedBy=multi-user.target