From f35f30433bcea7844d6231af3879cb96404a7dd8 Mon Sep 17 00:00:00 2001
From: Freemor <freemor@freemor.ca>
Date: Wed, 27 May 2020 15:28:05 -0300
Subject: Update [pcr/i2p] and do some resyncing with upstream.

    rebase on the upstream but remove all the stuff to launch chromium (browser) Cause we dont have it.
---
 pcr/i2p/i2prouter.service | 26 ++++++++++++++++++++------
 1 file changed, 20 insertions(+), 6 deletions(-)

(limited to 'pcr/i2p/i2prouter.service')

diff --git a/pcr/i2p/i2prouter.service b/pcr/i2p/i2prouter.service
index 7c278c833..5a80c870e 100644
--- a/pcr/i2p/i2prouter.service
+++ b/pcr/i2p/i2prouter.service
@@ -1,18 +1,32 @@
+# It's not recommended to modify this file because it will be
+# overwritten during package upgrades.  If you want to make changes, the
+# best way is to create a file "/etc/systemd/system/i2prouter.service.d/foo.conf"
+# and make your changes there. This file will be parsed after the file
+# i2p.service itself is parsed.
+
 [Unit]
 Description=Invisible Internet Project
-After=network.target
+After=network.target time-sync.target
 
 [Service]
 Type=forking
 User=i2p
 PIDFile=/run/i2p/i2p.pid
-Environment=WRAPPER_CONF=/opt/i2p/wrapper.config
-ExecStart=/usr/bin/java-service-wrapper ${WRAPPER_CONF} \
-    wrapper.name=i2prouter wrapper.syslog.ident=i2prouter \
-    wrapper.daemonize=TRUE
-SendSIGKILL=no
+
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+DeviceAllow=/dev/null rw
+DeviceAllow=/dev/urandom r
+LimitNOFILE=4096
+
+ExecStart=/usr/bin/java-service-wrapper /opt/i2p/wrapper.config \
+    wrapper.name=i2prouter \
+    wrapper.syslog.ident=i2prouter \
+    wrapper.daemonize=TRUE TZ=UTC
 ExecReload=/bin/kill -USR1 $MAINPID
 ExecStop=/bin/kill -TERM $MAINPID
+SendSIGKILL=no
 SuccessExitStatus=0 2 3
 
 [Install]
-- 
cgit v1.2.3