mpd/systemd/mpd.service.in

[Unit]
Description=Music Player Daemon
After=network.target sound.target

[Service]
ExecStart=@prefix@/bin/mpd --no-daemon

# allow MPD to use real-time priority 50
LimitRTPRIO=50
LimitRTTIME=infinity

# disallow writing to /usr, /bin, /sbin, ...
ProtectSystem=yes

# more paranoid security settings
NoNewPrivileges=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
ProtectKernelModules=yes
# AF_NETLINK is required by libsmbclient, or it will exit() .. *sigh*
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
RestrictNamespaces=yes

[Install]
WantedBy=multi-user.target
Also=mpd.socket
Install systemd service file if systemd is available 2011-09-30 08:37:36 +02:00			`[Unit]`
			`Description=Music Player Daemon`
mpd.service: depend on network.target Since some configurations use the "bind_to_address" option in their /etc/mpd.conf, the systemd service file must wait for the network.target or else mpd will start before it and thus fail due to no iface. 2012-11-21 17:26:23 +01:00			`After=network.target sound.target`
Install systemd service file if systemd is available 2011-09-30 08:37:36 +02:00
			`[Service]`
			`ExecStart=@prefix@/bin/mpd --no-daemon`

systemd: assign real-time budget 2014-02-12 21:00:53 +01:00			`# allow MPD to use real-time priority 50`
			`LimitRTPRIO=50`
fix LimitRTTIME in systemd unit file systemd does not understand LimitRTTIME=-1. For no limit we have to use the string 'infinity' (see systemd.exec(5)). Signed-off-by: Christian Hesse <mail@eworm.de> 2015-12-01 08:53:35 +01:00			`LimitRTTIME=infinity`
systemd: assign real-time budget 2014-02-12 21:00:53 +01:00
systemd: protect /usr when running under systemd 2015-08-11 19:00:21 +02:00			`# disallow writing to /usr, /bin, /sbin, ...`
			`ProtectSystem=yes`

systemd: more paranoid security settings 2016-12-09 10:36:02 +01:00			`# more paranoid security settings`
			`NoNewPrivileges=yes`
			`ProtectKernelTunables=yes`
			`ProtectControlGroups=yes`
			`ProtectKernelModules=yes`
			`# AF_NETLINK is required by libsmbclient, or it will exit() .. sigh`
			`RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK`
			`RestrictNamespaces=yes`

Install systemd service file if systemd is available 2011-09-30 08:37:36 +02:00			`[Install]`
			`WantedBy=multi-user.target`
systemd: also disable mpd.socket when disabling mpd.service e.g. when running 'update-rc.d mpd disable' 2015-08-11 18:58:34 +02:00			`Also=mpd.socket`