remotes

systemd/terractld.service

@@ -0,0 +1,31 @@
+[Unit]
+Description=terractl daemon: lets other hosts manage this host's Terraria servers
+Documentation=file://@DOCDIR@/README.md
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+# Listens on TERRACTL_LISTEN from /etc/default/terractl (default: all addresses,
+# port 7776). Its certificate and the list of trusted computers are kept in
+# /var/lib/terractl. Manage it with: terractl daemon enable|disable|status|trust
+ExecStart=@BINDIR@/terractl daemon serve
+Restart=on-failure
+RestartSec=5
+StateDirectory=terractl
+StateDirectoryMode=0755
+
+# Runs as root: it creates, deletes, starts and stops instances for trusted
+# computers, like sudo terractl does. Everything else is locked down.
+NoNewPrivileges=true
+ProtectSystem=full
+ProtectHome=true
+PrivateTmp=true
+PrivateDevices=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+LockPersonality=true
+
+[Install]
+WantedBy=multi-user.target