File nginx.service of Package nginx

[Unit]
Description=nginx HTTP and reverse proxy server
After=network-online.target remote-fs.target nss-lookup.target
Wants=network-online.target

[Service]
PIDFile=/run/nginx.pid
ExecStartPre=/usr/sbin/nginx -t
ExecStart=/usr/sbin/nginx
ExecReload=/bin/kill -s HUP $MAINPID
KillSignal=SIGQUIT
TimeoutStopSec=5
KillMode=mixed
PrivateTmp=true
ProtectSystem=strict
ProtectHome=yes
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
ReadWritePaths=/var/cache/nginx
ReadWritePaths=/var/lib/nginx/proxy
ReadWritePaths=/var/lib/nginx/tmp
ReadWritePaths=/var/log/nginx
RestrictAddressFamilies=AF_INET6 AF_INET AF_UNIX
SystemCallArchitectures=native
SystemCallFilter=@system-service

[Install]
WantedBy=multi-user.target