syncthing/etc/linux-systemd/system/syncthing@.service

[Unit]
Description=Syncthing - Open Source Continuous File Synchronization for %I
Documentation=man:syncthing(1)
After=network.target
StartLimitIntervalSec=60
StartLimitBurst=4

[Service]
User=%i
ExecStart=/usr/bin/syncthing serve --no-browser --no-restart --logflags=0
Restart=on-failure
RestartSec=1
SuccessExitStatus=3 4
RestartForceExitStatus=3 4

# Hardening
ProtectSystem=full
PrivateTmp=true
SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true

# Elevated permissions to sync ownership (disabled by default),
# see https://docs.syncthing.net/advanced/folder-sync-ownership
#AmbientCapabilities=CAP_CHOWN CAP_FOWNER

[Install]
WantedBy=multi-user.target
systemd units for system/user 2014-11-19 08:42:05 +00:00			`[Unit]`
Some systemd tweaks - Removed environment file to keep the service file minimal. "systemctl edit syncthing.service" does the job if somebody wants to customize the service. - Changed "cmdline.target" to "default.target" as "cmdline.target" does not exist in systemd.special: http://www.freedesktop.org/software/systemd/man/systemd.special.html - Added a missing "After=network.target". - Added a documentation hint, thx @jaystrictor 2015-02-02 00:11:41 +00:00			`Description=Syncthing - Open Source Continuous File Synchronization for %I`
Let "systemctl help" command work Before this change, issuing either systemctl --user help syncthing[.service] or systemctl help syncthing@user[.service] gave the message Can't show: http://docs.syncthing.net/ Following this change the syncthing man page is displayed 2016-03-16 13:09:01 +00:00			`Documentation=man:syncthing(1)`
etc: Revert systemd After=multi-user.target addition (fixes #5676) This reverts commit 84fe2856591a204fcbba096cd405c9ccaef48c06. 2019-04-29 19:36:46 +00:00			`After=network.target`
etc: Fix start-limit parameters location in systemd units (ref #7439) (#7529) 2021-03-28 12:14:10 +00:00			`StartLimitIntervalSec=60`
			`StartLimitBurst=4`
systemd units for system/user 2014-11-19 08:42:05 +00:00
			`[Service]`
			`User=%i`
etc: Adjust all the startup scripts to new cmd (ref #7330) (#7353) 2021-02-11 11:18:47 +00:00			`ExecStart=/usr/bin/syncthing serve --no-browser --no-restart --logflags=0`
on-failure instead of always as we cannot otherwise kill the service 2014-11-19 08:46:14 +00:00			`Restart=on-failure`
cmd/syncthing, etc: Consistent failure restart backoff (#7439) 2021-03-07 14:25:55 +00:00			`RestartSec=1`
systemd: Remove exit code 2, due to #2578 PR #2578 enables us to remove the exit code 2 from the list of success status codes, because SIGINT will be handled properly. I have also converted STNORESTART to --no-restart for the sake of consistency. 2015-12-15 07:38:08 +00:00			`SuccessExitStatus=3 4`
Added exit code definitions to systemd service files (fixes #1324) 2015-02-01 22:55:54 +00:00			`RestartForceExitStatus=3 4`
systemd units for system/user 2014-11-19 08:42:05 +00:00
etc: Add hardening options to syncthing systemd services (fixes #5286) (#5351) 2018-12-07 13:58:12 +00:00			`# Hardening`
			`ProtectSystem=full`
			`PrivateTmp=true`
			`SystemCallArchitectures=native`
			`MemoryDenyWriteExecute=true`
			`NoNewPrivileges=true`

etc/linux-systemd: Mention AmbientCapabilities for syncOwnership. (#8536) Add a commented entry to the systemd service file templates to point the user in the right direction when using syncOwnership and starting via systemd. Which is more upgrade-friendly than setting caps on the executable directly, as mentioned in the docs. 2022-09-13 08:00:47 +00:00			`# Elevated permissions to sync ownership (disabled by default),`
			`# see https://docs.syncthing.net/advanced/folder-sync-ownership`
			`#AmbientCapabilities=CAP_CHOWN CAP_FOWNER`

systemd units for system/user 2014-11-19 08:42:05 +00:00			`[Install]`
			`WantedBy=multi-user.target`