1 [Unit] 2 Description=ogit - mobile-friendly git web interface 3 After=network.target 4 5 [Service] 6 Type=simple 7 ExecStart=/usr/local/bin/ogit 8 Environment=OGIT_CONFIG=/etc/ogit/config.toml 9 Restart=on-failure 10 RestartSec=5 11 12 User=ogit 13 Group=git 14 15 # Hardening 16 NoNewPrivileges=yes 17 ProtectSystem=strict 18 ProtectHome=yes 19 ReadOnlyPaths=/srv/git 20 PrivateTmp=yes 21 PrivateDevices=yes 22 ProtectKernelTunables=yes 23 ProtectControlGroups=yes 24 RestrictSUIDSGID=yes 25 RestrictNamespaces=yes 26 27 [Install] 28 WantedBy=multi-user.target 29