tipfax/tipfax.service at main · danirukun/tipfax · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
[Unit]
Description=TipFax Server - StreamElements tip printer service
After=network.target
Wants=network.target

[Service]
Type=simple
User=tipfax
Group=tipfax
WorkingDirectory=/opt/tipfax
ExecStart=/opt/tipfax/tipfax-server
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal
SyslogIdentifier=tipfax

# Environment variables
Environment=SE_JWT_TOKEN=
Environment=DEVICE_PATH=/dev/usb/lp0
Environment=SERVER_PORT=:8082

# Security settings
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/tipfax
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true

# Device access for printer
DeviceAllow=/dev/usb/lp0 rw
SupplementaryGroups=lp

[Install]
WantedBy=multi-user.target