# vim:ft=systemd
[Unit]
Description=Pleroma social network
After=network.target postgresql.service

[Service]
User=pleroma
Environment="HOME=/opt/pleroma"
WorkingDirectory=/opt/pleroma

KillMode=process
Restart=on-failure

ExecStart=/opt/pleroma/bin/pleroma start
ExecStop=/opt/pleroma/bin/pleroma stop

PrivateTmp=true
ProtectHome=true
ProtectSystem=full
PrivateDevice=false
NoNewPrivileges=true
CapabilityBoundingSet=~CAP_SYS_ADMIN

[Install]
WantedBy=multi-user.target