syncthing/cmd/relaysrv/etc/linux-systemd/syncthing-relaysrv.service

[Unit]
Description=Syncthing relay server
After=network.target

[Service]
User=syncthing-relaysrv
Group=syncthing-relaysrv
ExecStart=/usr/bin/relaysrv
WorkingDirectory=/var/lib/syncthing-relaysrv
RootDirectory=/var/lib/syncthing-relaysrv

PrivateTmp=true
ProtectSystem=full
ProtectHome=true
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target
Add systemd service file 2015-09-10 20:11:15 +00:00			`[Unit]`
			`Description=Syncthing relay server`
			`After=network.target`

			`[Service]`
			`User=syncthing-relaysrv`
			`Group=syncthing-relaysrv`
Rename relaysrv binary, see #11 2015-10-10 13:24:20 +00:00			`ExecStart=/usr/bin/relaysrv`
Jail the whole thing a bit more Add WorkingDirectory to create and use the certificates within /var/lib/syncthing-relaysrv. Add RootDirectory to chroot(2) the whole thing into that directory. 2015-10-10 12:56:47 +00:00			`WorkingDirectory=/var/lib/syncthing-relaysrv`
			`RootDirectory=/var/lib/syncthing-relaysrv`
Add systemd service file 2015-09-10 20:11:15 +00:00
			`PrivateTmp=true`
			`ProtectSystem=full`
			`ProtectHome=true`
			`NoNewPrivileges=true`

			`[Install]`
			`WantedBy=multi-user.target`