mpd/systemd/system/mpd.service.in

[Unit]
Description=Music Player Daemon
Documentation=man:mpd(1) man:mpd.conf(5)
After=network.target sound.target

[Service]
Type=notify
ExecStart=@prefix@/bin/mpd --no-daemon

# Enable this setting to ask systemd to watch over MPD, see
# systemd.service(5).  This is disabled by default because it causes
# periodic wakeups which are unnecessary if MPD is not playing.
#WatchdogSec=120

# allow MPD to use real-time priority 50
LimitRTPRIO=50
LimitRTTIME=infinity

# disallow writing to /usr, /bin, /sbin, ...
ProtectSystem=yes

# more paranoid security settings
NoNewPrivileges=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
ProtectKernelModules=yes
# AF_NETLINK is required by libsmbclient, or it will exit() .. *sigh*
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
RestrictNamespaces=yes

[Install]
WantedBy=multi-user.target
Also=mpd.socket
Install systemd service file if systemd is available 2011-09-30 08:37:36 +02:00			`[Unit]`
			`Description=Music Player Daemon`
mpd.service: Set the Documentation option This makes references to mpd(1) and mpd(5) appear in systemd status output. 2015-07-17 19:55:23 +02:00			`Documentation=man:mpd(1) man:mpd.conf(5)`
mpd.service: depend on network.target Since some configurations use the "bind_to_address" option in their /etc/mpd.conf, the systemd service file must wait for the network.target or else mpd will start before it and thus fail due to no iface. 2012-11-21 17:26:23 +01:00			`After=network.target sound.target`
Install systemd service file if systemd is available 2011-09-30 08:37:36 +02:00
			`[Service]`
systemd: set Type=notify Tell systemd that MPD is going to notify it when initialization is done. 2016-02-26 16:14:06 +01:00			`Type=notify`
Install systemd service file if systemd is available 2011-09-30 08:37:36 +02:00			`ExecStart=@prefix@/bin/mpd --no-daemon`

lib/systemd/Watchdog: implement the systemd watchdog protocol 2018-08-02 11:15:35 +02:00			`# Enable this setting to ask systemd to watch over MPD, see`
			`# systemd.service(5). This is disabled by default because it causes`
			`# periodic wakeups which are unnecessary if MPD is not playing.`
			`#WatchdogSec=120`

systemd: assign real-time budget 2014-02-12 21:00:53 +01:00			`# allow MPD to use real-time priority 50`
			`LimitRTPRIO=50`
fix LimitRTTIME in systemd unit file systemd does not understand LimitRTTIME=-1. For no limit we have to use the string 'infinity' (see systemd.exec(5)). Signed-off-by: Christian Hesse <mail@eworm.de> 2015-12-01 08:53:35 +01:00			`LimitRTTIME=infinity`
systemd: assign real-time budget 2014-02-12 21:00:53 +01:00
systemd: protect /usr when running under systemd 2015-08-11 19:00:21 +02:00			`# disallow writing to /usr, /bin, /sbin, ...`
			`ProtectSystem=yes`

systemd: more paranoid security settings 2016-12-09 10:36:02 +01:00			`# more paranoid security settings`
			`NoNewPrivileges=yes`
			`ProtectKernelTunables=yes`
			`ProtectControlGroups=yes`
			`ProtectKernelModules=yes`
			`# AF_NETLINK is required by libsmbclient, or it will exit() .. sigh`
			`RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK`
			`RestrictNamespaces=yes`

Install systemd service file if systemd is available 2011-09-30 08:37:36 +02:00			`[Install]`
			`WantedBy=multi-user.target`
systemd: also disable mpd.socket when disabling mpd.service e.g. when running 'update-rc.d mpd disable' 2015-08-11 18:58:34 +02:00			`Also=mpd.socket`