Différences

Ci-dessous, les différences entre deux révisions de la page.

--- installation_de_mautrix-whatsapp [2021/12/03 01:06] – créée tomamplius
+++ installation_de_mautrix-whatsapp [2021/12/03 01:10] (Version actuelle) – tomamplius
@@ Ligne 1: / Ligne 1: @@
-<code>
+<code bash>
 cd /tmp/
 apt install wget ca-certificates git libolm3 libolm-dev build-essential
@@ Ligne 9: / Ligne 9: @@
 git clone https://github.com/mautrix/whatsapp.git
- cd whatsapp/
+cd whatsapp/
- ./build.sh
+./build.sh
- useradd mautrix-whatsapp -r -s /bin/false -m -d /usr/lib/mautrix-whatsapp
+useradd mautrix-whatsapp -r -s /bin/false -m -d /usr/lib/mautrix-whatsapp
- cp mautrix-whatsapp /usr/lib/mautrix-whatsapp
+cp mautrix-whatsapp /usr/lib/mautrix-whatsapp/
- mkdir /etc/mautrix-whatsapp
+mkdir /etc/mautrix-whatsapp/
- mv ~/config.yaml /etc/mautrix-whatsapp
+mv ~/config.yaml /etc/mautrix-whatsapp/
+nano /etc/systemd/system/mautrix-whatsapp.service
- nano /etc/systemd/system/mautrix-whatsapp.service
+systemctl start mautrix-whatsapp
- systemctl start mautrix-whatsapp
+systemctl enable mautrix-whatsapp
- systemctl enable mautrix-whatsapp
 </code>
+<file bash /etc/systemd/system/mautrix-whatsapp.service>
+[Unit]
+Description=mautrix-whatsapp bridge
+[Service]
+Type=exec
+User=mautrix-whatsapp
+WorkingDirectory=/usr/lib/mautrix-whatsapp
+ExecStart=/usr/lib/mautrix-whatsapp/mautrix-whatsapp -c /etc/mautrix-whatsapp/config.yaml
+Restart=on-failure
+RestartSec=30s
+# Optional hardening to improve security
+ReadWritePaths=/usr/lib/mautrix-whatsapp /etc/mautrix-whatsapp
+NoNewPrivileges=yes
+MemoryDenyWriteExecute=true
+PrivateDevices=yes
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=strict
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+RestrictRealtime=true
+LockPersonality=true
+ProtectKernelLogs=true
+ProtectKernelTunables=true
+ProtectHostname=true
+ProtectKernelModules=true
+PrivateUsers=true
+ProtectClock=true
+SystemCallArchitectures=native
+SystemCallErrorNumber=EPERM
+SystemCallFilter=@system-service
+[Install]
+WantedBy=multi-user.target
+</file>