diff --git a/documents/resources/wallet-server.md b/documents/resources/wallet-server.md index 88745e3..025bbf9 100644 --- a/documents/resources/wallet-server.md +++ b/documents/resources/wallet-server.md @@ -40,13 +40,19 @@ Description="LBRYcrd daemon" After=network.target [Service] -ExecStart=/home//lbrycrdd -datadir="/home//.lbrycrd" -pid="/home//pid" +ExecStart=/home//lbrycrdd -datadir="/home//.lbrycrd" -pid="/run/lbrycrdd/lbrycrdd.pid" +# Creates /run/lbrycrdd +RuntimeDirectory=lbrycrdd Type=Forking -PIDFile=/home//.lbrycrd/pid -User= -Group= +PIDFile=/run/lbrycrdd/lbrycrdd.pid Restart=on-failure -KillMode=process + +# hardening +PrivateTmp=true +ProtectSystem=full +NoNewPrivileges=true +PrivateDevices=true +MemoryDenyWriteExecute=true [Install] WantedBy=multi-user.target