File xmrig.service of Package xmrig

[Unit]
Description=XMRig Daemon for %i
Documentation=https://xmrig.com
ConditionFileNotEmpty=/etc/xmrig/%i.conf
After=network.target

[Service]
Type=simple
DynamicUser=true
User=xmrig
Group=xmrig
PrivateUsers=true
CapabilityBoundingSet=
PrivateDevices=true
ProtectClock=true
ProtectKernelLogs=true
ProtectControlGroups=true
ProtectKernelModules=true
ProtectHostname=true
ProtectKernelTunables=true
ProtectHome=true
ProtectProc=invisible
ProcSubset=pid
LockPersonality=true
PrivateMounts=true
RestrictAddressFamilies=AF_INET AF_UNIX
RestrictNamespaces=true
RestrictRealtime=true
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources
SystemCallFilter=sched_setaffinity
UMask=0066
WorkingDirectory=/etc/xmrig
ExecStart=/usr/bin/xmrig --syslog --cpu-no-yield --config %i.conf
Restart=on-failure
Nice=19
CPUSchedulingPolicy=idle
IOSchedulingClass=idle
RestartSec=20s
StartLimitInterval=30min
StartLimitBurst=30

[Install]
WantedBy=multi-user.target