Server : Apache System : Linux ks5.tuic.fr 6.1.0-18-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.76-1 (2024-02-01) x86_64 User : pragmatice ( 1003) PHP Version : 8.2.24 Disable Function : NONE Directory :  /usr/lib/systemd/system/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

[Unit]
Description=Purge expired Roundcube sessions, caches and tempfiles
Documentation=https://github.com/roundcube/roundcubemail/wiki/Installation

[Service]
Type=oneshot
User=www-data
Group=www-data
ExecStart=/usr/share/roundcube/bin/gc.sh

# Hardening -- further hardening can be achieved via unit overrides:
# - if sqlite is used, set RestrictAddressFamilies=none;
# - otherwise, set ProtectSystem=strict and set RestrictAddressFamilies
#   to the address family used for DB connection
#
NoNewPrivileges=yes
PrivateDevices=yes
ProtectHome=yes
ProtectSystem=full
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
# these ReadWritePaths= directives are useless for ProtectSystem=full
# but handy when overridden with ProtectSystem=strict
ReadWritePaths=/var/lib/roundcube/temp
ReadWritePaths=/var/log/roundcube