From 85a36439cba89a4b26f5dbd4eb3ef6ca2adff2ac Mon Sep 17 00:00:00 2001
From: Justin <litch@me.com>
Date: Mon, 6 Feb 2023 09:51:32 -0600
Subject: [PATCH] Systemd service file is more robust

---
 doc/DEPLOYMENT.md | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/doc/DEPLOYMENT.md b/doc/DEPLOYMENT.md
index dc7877a..0d7f724 100644
--- a/doc/DEPLOYMENT.md
+++ b/doc/DEPLOYMENT.md
@@ -19,7 +19,7 @@ The goal is to have:
 
 The remainder of the document assumes a plain VPS.
 
-Vultr 
+Vultr - $12/mo
 - High performance Intel
 - 1 vCPU
 - 2048 MB Ram
@@ -114,9 +114,14 @@ Put the following file at /etc/systemd/system/strfry.service
 
         [Service]
         User=strfry
-        ExecStart=/usr/bin/local/strfry relay
-        Restart=always
-        RestartSec=10
+        ExecStart=/usr/local/bin/strfry relay
+        Restart=on-failure
+        RestartSec=5
+        ProtectHome=yes
+        NoNewPrivileges=yes
+        ProtectSystem=full
+        LimitNOFILE=65536
+        LimitCORE=1000000000
 
         [Install]
         WantedBy=multi-user.target