jellyfin.service 969 B

123456789101112131415161718192021222324252627282930313233343536
  1. [Unit]
  2. Description = Jellyfin Media Server
  3. After = network-online.target
  4. [Service]
  5. Type = simple
  6. EnvironmentFile = /etc/default/jellyfin
  7. User = jellyfin
  8. ExecStart = /usr/bin/jellyfin ${JELLYFIN_WEB_OPT} ${JELLYFIN_RESTART_OPT} ${JELLYFIN_FFMPEG_OPT} ${JELLYFIN_SERVICE_OPT} ${JELLYFIN_NOWEBAPP_OPT} ${JELLYFIN_ADDITIONAL_OPTS}
  9. Restart = on-failure
  10. TimeoutSec = 15
  11. NoNewPrivileges=true
  12. SystemCallArchitectures=native
  13. RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
  14. ProtectKernelModules=True
  15. SystemCallFilter=~@clock
  16. SystemCallFilter=~@aio
  17. SystemCallFilter=~@chown
  18. SystemCallFilter=~@cpu-emulation
  19. SystemCallFilter=~@debug
  20. SystemCallFilter=~@keyring
  21. SystemCallFilter=~@memlock
  22. SystemCallFilter=~@module
  23. SystemCallFilter=~@mount
  24. SystemCallFilter=~@obsolete
  25. SystemCallFilter=~@privileged
  26. SystemCallFilter=~@raw-io
  27. SystemCallFilter=~@reboot
  28. SystemCallFilter=~@setuid
  29. SystemCallFilter=~@swap
  30. SystemCallErrorNumber=EPERM
  31. [Install]
  32. WantedBy = multi-user.target