2 Description=Send secure messages to Signal clients
3 Wants=network-online.target
4 After=network-online.target
5 Requires=signal-cli-socket.socket
9 Environment="SIGNAL_CLI_OPTS=-Xms2m"
10 # Update 'ReadWritePaths' if you change the config path here
11 ExecStart=%dir%/bin/signal-cli --config /var/lib/signal-cli daemon
20 ProtectControlGroups=true
23 ProtectKernelLogs=true
24 ProtectKernelModules=true
25 ProtectKernelTunables=true
28 # Profile pictures and attachments to upload must be located here for the service to access them
29 ReadWritePaths=/var/lib/signal-cli
31 RestrictAddressFamilies=AF_INET AF_INET6
32 RestrictNamespaces=true
35 # JVM always exits with 143 in reaction to SIGTERM signal
38 StandardOutput=journal
40 SystemCallArchitectures=native
41 SystemCallFilter=~@debug @mount @obsolete @privileged @resources
43 # Create the user and home directory with 'useradd -r -U -s /usr/sbin/nologin -m -b /var/lib signal-cli'
47 Also=signal-cli-socket.socket
48 WantedBy=default.target