466f6b4fc4
The HTTP Streamer can be enabled via the _streamer_enabled_ daemon parameter. When the Streamer is active the daemon starts capturing the configured _Sinks_ up to the maximum number of channels configured by the _streamer_channels_ parameters. The captured PCM samples are split into _streamer_files_num_ files of _streamer_file_duration_ duration (in seconds) for each sink, compressed using AAC LC codec and served via HTTP. The HTTP streamer requires the libfaac-dev package to compile. Please note that since the HTTP Streamer uses the RAVENNA ALSA device for capturing it's not possible to use such device for other audio captures.
63 lines
1.5 KiB
Desktop File
63 lines
1.5 KiB
Desktop File
[Unit]
|
|
Description=AES67 daemon service
|
|
Before=multi-user.target
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=notify
|
|
# Will be adjusted by service during startup
|
|
WatchdogSec=10
|
|
|
|
# Run as separate user created via sysusers.d
|
|
User=aes67-daemon
|
|
ExecStart=/usr/local/bin/aes67-daemon
|
|
#ExecStart=strace -e trace=file -o /home/aes67-daemon/trace_erronly_fail.log -Z -f -tt /usr/local/bin/aes67-daemon
|
|
|
|
# Security filters.
|
|
CapabilityBoundingSet=
|
|
DevicePolicy=closed
|
|
DeviceAllow=char-alsa
|
|
DeviceAllow=/dev/snd/*
|
|
LockPersonality=yes
|
|
MemoryDenyWriteExecute=yes
|
|
NoNewPrivileges=yes
|
|
PrivateDevices=no
|
|
PrivateMounts=yes
|
|
PrivateTmp=yes
|
|
PrivateUsers=yes
|
|
# interface::get_mac_from_arp_cache() reads from /proc/net/arp
|
|
ProcSubset=all
|
|
ProtectClock=no
|
|
ProtectControlGroups=yes
|
|
ProtectHome=yes
|
|
ProtectHostname=yes
|
|
ProtectKernelLogs=yes
|
|
ProtectKernelModules=yes
|
|
ProtectKernelTunables=yes
|
|
ProtectProc=invisible
|
|
ProtectSystem=strict
|
|
RemoveIPC=yes
|
|
RestrictAddressFamilies=AF_INET AF_NETLINK AF_UNIX
|
|
RestrictNamespaces=yes
|
|
RestrictRealtime=yes
|
|
RestrictSUIDSGID=yes
|
|
SystemCallArchitectures=native
|
|
SystemCallFilter=~@clock
|
|
SystemCallFilter=~@cpu-emulation
|
|
SystemCallFilter=~@debug
|
|
SystemCallFilter=~@module
|
|
SystemCallFilter=~@mount
|
|
SystemCallFilter=~@obsolete
|
|
SystemCallFilter=~@privileged
|
|
SystemCallFilter=~@raw-io
|
|
SystemCallFilter=~@reboot
|
|
SystemCallFilter=~@resources
|
|
SystemCallFilter=~@swap
|
|
UMask=077
|
|
# Paths matching daemon.conf
|
|
ReadWritePaths=/etc/daemon.conf
|
|
ReadWritePaths=/etc/status.json
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|