Skip to content

Commit 6939a15

Browse files
committed
Fix llms.txt
1 parent 0079040 commit 6939a15

File tree

1 file changed

+38
-1
lines changed

1 file changed

+38
-1
lines changed

llms.txt

Lines changed: 38 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14323,7 +14323,44 @@ touch /etc/systemd/system/polkadot-validator.service
1432314323
In this unit file, you will write the commands that you want to run on server boot/restart:
1432414324

1432514325
```systemd title="/etc/systemd/system/polkadot-validator.service"
14326-
Failed to fetch snippet after 3 attempts
14326+
[Unit]
14327+
Description=Polkadot Node
14328+
After=network.target
14329+
Documentation=https://github.com/paritytech/polkadot-sdk
14330+
14331+
[Service]
14332+
EnvironmentFile=-/etc/default/polkadot
14333+
ExecStart=/usr/bin/polkadot $POLKADOT_CLI_ARGS
14334+
User=polkadot
14335+
Group=polkadot
14336+
Restart=always
14337+
RestartSec=120
14338+
CapabilityBoundingSet=
14339+
LockPersonality=true
14340+
NoNewPrivileges=true
14341+
PrivateDevices=true
14342+
PrivateMounts=true
14343+
PrivateTmp=true
14344+
PrivateUsers=true
14345+
ProtectClock=true
14346+
ProtectControlGroups=true
14347+
ProtectHostname=true
14348+
ProtectKernelModules=true
14349+
ProtectKernelTunables=true
14350+
ProtectSystem=strict
14351+
RemoveIPC=true
14352+
RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX
14353+
RestrictNamespaces=false
14354+
RestrictSUIDSGID=true
14355+
SystemCallArchitectures=native
14356+
SystemCallFilter=@system-service
14357+
SystemCallFilter=landlock_add_rule landlock_create_ruleset landlock_restrict_self seccomp mount umount2
14358+
SystemCallFilter=~@clock @module @reboot @swap @privileged
14359+
SystemCallFilter=pivot_root
14360+
UMask=0027
14361+
14362+
[Install]
14363+
WantedBy=multi-user.target
1432714364
```
1432814365

1432914366
!!! warning "Restart delay and equivocation risk"

0 commit comments

Comments
 (0)