summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--valkey.service11
1 files changed, 11 insertions, 0 deletions
diff --git a/valkey.service b/valkey.service
index b7d58f3..1689387 100644
--- a/valkey.service
+++ b/valkey.service
@@ -16,6 +16,17 @@ User=valkey
Group=valkey
RuntimeDirectory=valkey
RuntimeDirectoryMode=0755
+PrivateTmp=true
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
[Install]
WantedBy=multi-user.target