# vim:ft=systemd
[Unit]
Description=Pleroma social network %i
After=network.target

[Service]
User=pleroma
Environment="HOME={{ pleroma_home }}"
WorkingDirectory={{ pleroma_home }}

KillMode=process
Restart=on-failure

ExecStart={{ pleroma_home }}/bin/pleroma start
ExecStop={{ pleroma_home }}/bin/pleroma stop

PrivateTmp=true
ProtectHome=true
ProtectSystem=full
PrivateDevice=false
NoNewPrivileges=true
CapabilityBoundingSet=~CAP_SYS_ADMIN

[Install]
WantedBy=multi-user.target