1 files changed, 29 insertions, 0 deletions
diff --git a/slopbot.service b/slopbot.service
new file mode 100644
index 0000000..396e9d0
--- /dev/null
+++ b/slopbot.service
@@ -0,0 +1,29 @@
+[Unit]
+Description=slopbot Zulip bot
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=/home/ben/src/bsima/slopbot
+EnvironmentFile=-/home/ben/src/bsima/slopbot/.env
+ExecStart=/run/current-system/sw/bin/nix --extra-experimental-features 'nix-command flakes' run /home/ben/src/bsima/slopbot#slopbot
+Restart=on-failure
+RestartSec=5
+
+NoNewPrivileges=true
+CapabilityBoundingSet=
+LockPersonality=true
+PrivateDevices=true
+ProtectClock=true
+ProtectControlGroups=true
+ProtectKernelLogs=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictNamespaces=true
+RestrictRealtime=true
+SystemCallArchitectures=native
+
+[Install]
+WantedBy=multi-user.target