/lib/systemd/system/coquelicot.service is in coquelicot 0.9.5-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 | [Unit]
Description="one-click" file sharing web application
After=network.target
[Service]
Type=forking
PIDFile=/var/run/coquelicot/coquelicot.pid
User=coquelicot
Group=coquelicot
PermissionsStartOnly=yes
ExecStartPre=/usr/bin/install -m 02750 -o coquelicot -g coquelicot -d /var/run/coquelicot
ExecStart=/usr/bin/coquelicot start
# ExecStop sends SIGSTOP (graceful stop) to Rainbows!
# If, after 5s (--retry QUIT/5) the server is still running, systemd takes control
# and sends SIGTERM (fast shutdown) to the main process.
# After another 5s (TimeoutStopSec=5), and if nginx is alive, systemd sends
# SIGKILL to all the remaining processes in the process group (KillMode=mixed).
ExecStop=/sbin/start-stop-daemon --quiet --stop --retry QUIT/5 --pidfile /var/run/coquelicot/coquelicot.pid
TimeoutStopSec=5
KillMode=mixed
# Hardening
PrivateTmp=yes
PrivateDevices=yes
ProtectHome=yes
ProtectSystem=full
ReadOnlyDirectories=/
ReadWriteDirectories=-/var/cache/coquelicot
ReadWriteDirectories=-/var/lib/coquelicot
ReadWriteDirectories=-/var/log/coquelicot
ReadWriteDirectories=-/var/run
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
[Install]
WantedBy=multi-user.target
|