|
|
2ea307 |
[Unit]
|
|
|
2ea307 |
Description=Loki is a horizontally-scalable, highly-available, multi-tenant log aggregation system
|
|
|
2ea307 |
Documentation=https://github.com/grafana/loki
|
|
|
2ea307 |
|
|
|
2ea307 |
[Service]
|
|
|
fdb740 |
# added automatically, for details please see
|
|
|
fdb740 |
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
|
fdb740 |
ProtectSystem=full
|
|
|
fdb740 |
ProtectHome=true
|
|
|
fdb740 |
PrivateDevices=true
|
|
|
fdb740 |
ProtectHostname=true
|
|
|
fdb740 |
ProtectClock=true
|
|
|
fdb740 |
ProtectKernelTunables=true
|
|
|
fdb740 |
ProtectKernelModules=true
|
|
|
fdb740 |
ProtectControlGroups=true
|
|
|
fdb740 |
RestrictRealtime=true
|
|
|
fdb740 |
# end of automatic additions
|
|
|
2ea307 |
Restart=always
|
|
|
2ea307 |
User=loki
|
|
|
2ea307 |
EnvironmentFile=-/etc/sysconfig/loki
|
|
|
201e24 |
ExecStart=/usr/bin/loki -config.file=${CONFIG_FILE}
|
|
|
2ea307 |
ExecReload=/bin/kill -HUP $MAINPID
|
|
|
2ea307 |
TimeoutStopSec=20s
|
|
|
2ea307 |
SendSIGKILL=no
|
|
|
2ea307 |
|
|
|
2ea307 |
[Install]
|
|
|
2ea307 |
WantedBy=multi-user.target
|