[Unit]
Description=Content HTTP service
After=network.target

[Service]
Type=simple
User=contentd
Group=contentd
EnvironmentFile=/etc/contentd/environment
ExecStart=/opt/contentd/current/contentd
Restart=on-failure
RestartSec=3
TimeoutStopSec=15
KillSignal=SIGTERM
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectControlGroups=true
ProtectKernelModules=true
RestrictSUIDSGID=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
CapabilityBoundingSet=
UMask=0077
LimitNOFILE=4096
TasksMax=128
MemoryMax=1G

[Install]
WantedBy=multi-user.target