From 5026646e9f866c02d6d95e8635d58746715c96dd Mon Sep 17 00:00:00 2001
From: Assem <asem.hasna@gmail.com>
Date: Fri, 3 Nov 2023 15:46:42 +0100
Subject: [PATCH] =?UTF-8?q?chore:=20simplify=20default=20mainnet=20`system?=
 =?UTF-8?q?d`=20config=20of=20`chainflip-node.service`=20=F0=9F=98=8C=20(#?=
 =?UTF-8?q?4199)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../berghain/chainflip-archive-node.service   | 29 -------------------
 .../berghain/chainflip-genesis-node.service   | 28 ------------------
 2 files changed, 57 deletions(-)

diff --git a/state-chain/node/package/berghain/chainflip-archive-node.service b/state-chain/node/package/berghain/chainflip-archive-node.service
index 2228c4c4d9..38379f0cda 100644
--- a/state-chain/node/package/berghain/chainflip-archive-node.service
+++ b/state-chain/node/package/berghain/chainflip-archive-node.service
@@ -5,9 +5,6 @@ Description=Chainflip Archive Node
 Restart=always
 RestartSec=30
 
-User=flip
-Group=flip
-
 WorkingDirectory=/etc/chainflip
 
 ExecStart=/usr/bin/chainflip-node \
@@ -15,7 +12,6 @@ ExecStart=/usr/bin/chainflip-node \
     --base-path=/etc/chainflip/chaindata \
     --node-key-file=/etc/chainflip/keys/node_key_file \
     --trie-cache-size=0 \
-    --prometheus-external \
     --rpc-cors=all \
     --rpc-methods=unsafe \
     --state-pruning=archive \
@@ -23,30 +19,5 @@ ExecStart=/usr/bin/chainflip-node \
     --unsafe-rpc-external \
     --sync=full
 
-NoNewPrivileges=yes
-CapabilityBoundingSet=
-SystemCallArchitectures=native
-SystemCallFilter=@system-service
-
-PrivateDevices=yes
-PrivateUsers=yes
-PrivateTmp=yes
-
-ProtectClock=yes
-ProtectHome=true
-ProtectKernelLogs=yes
-ProtectKernelModules=yes
-ProtectKernelTunables=yes
-ProtectHostname=yes
-ProtectControlGroups=yes
-
-RestrictNamespaces=yes
-RestrictRealtime=yes
-RestrictSUIDSGID=yes
-RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
-
-StandardOutput=journal
-StandardError=journal
-
 [Install]
 WantedBy=multi-user.target
diff --git a/state-chain/node/package/berghain/chainflip-genesis-node.service b/state-chain/node/package/berghain/chainflip-genesis-node.service
index 3b2d1b669d..edda8f0db0 100644
--- a/state-chain/node/package/berghain/chainflip-genesis-node.service
+++ b/state-chain/node/package/berghain/chainflip-genesis-node.service
@@ -5,9 +5,6 @@ Description=Chainflip Genesis Node
 Restart=always
 RestartSec=30
 
-User=flip
-Group=flip
-
 WorkingDirectory=/etc/chainflip
 
 ExecStart=/usr/bin/chainflip-node \
@@ -18,30 +15,5 @@ ExecStart=/usr/bin/chainflip-node \
     --trie-cache-size=0 \
     --sync=full
 
-NoNewPrivileges=yes
-CapabilityBoundingSet=
-SystemCallArchitectures=native
-SystemCallFilter=@system-service
-
-PrivateDevices=yes
-PrivateUsers=yes
-PrivateTmp=yes
-
-ProtectClock=yes
-ProtectHome=true
-ProtectKernelLogs=yes
-ProtectKernelModules=yes
-ProtectKernelTunables=yes
-ProtectHostname=yes
-ProtectControlGroups=yes
-
-RestrictNamespaces=yes
-RestrictRealtime=yes
-RestrictSUIDSGID=yes
-RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
-
-StandardOutput=journal
-StandardError=journal
-
 [Install]
 WantedBy=multi-user.target