jellyfin.service 1.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051
  1. [Unit]
  2. Description = Jellyfin Media Server
  3. After = network-online.target
  4. [Service]
  5. Type = simple
  6. EnvironmentFile = /etc/sysconfig/jellyfin
  7. User = jellyfin
  8. Group = jellyfin
  9. WorkingDirectory = /var/lib/jellyfin
  10. ExecStart = /usr/bin/jellyfin ${JELLYFIN_WEB_OPT} ${JELLYFIN_RESTART_OPT} ${JELLYFIN_FFMPEG_OPT} ${JELLYFIN_SERVICE_OPT} ${JELLYFIN_NOWEBAPP_OPT} ${JELLYFIN_ADDITIONAL_OPTS}
  11. Restart = on-failure
  12. TimeoutSec = 15
  13. SuccessExitStatus=0 143
  14. NoNewPrivileges=true
  15. SystemCallArchitectures=native
  16. RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
  17. RestrictNamespaces=false
  18. RestrictRealtime=true
  19. RestrictSUIDSGID=true
  20. ProtectClock=true
  21. ProtectControlGroups=false
  22. ProtectHostname=true
  23. ProtectKernelLogs=false
  24. ProtectKernelModules=false
  25. ProtectKernelTunables=false
  26. LockPersonality=true
  27. PrivateTmp=false
  28. PrivateDevices=false
  29. PrivateUsers=true
  30. RemoveIPC=true
  31. SystemCallFilter=~@clock
  32. SystemCallFilter=~@aio
  33. SystemCallFilter=~@chown
  34. SystemCallFilter=~@cpu-emulation
  35. SystemCallFilter=~@debug
  36. SystemCallFilter=~@keyring
  37. SystemCallFilter=~@memlock
  38. SystemCallFilter=~@module
  39. SystemCallFilter=~@mount
  40. SystemCallFilter=~@obsolete
  41. SystemCallFilter=~@privileged
  42. SystemCallFilter=~@raw-io
  43. SystemCallFilter=~@reboot
  44. SystemCallFilter=~@setuid
  45. SystemCallFilter=~@swap
  46. SystemCallErrorNumber=EPERM
  47. [Install]
  48. WantedBy = multi-user.target