File asterisk.service of Package asterisk

[Unit]
Description=Asterisk PBX and telephony daemon.
Wants=network-online.target
After=network.target network-online.target mariadb.service

[Service]
User=asterisk
Group=asterisk
PrivateUsers=true
AmbientCapabilities=
CapabilityBoundingSet=
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK
RestrictNamespaces=true
PrivateDevices=true
NoNewPrivileges=true
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=yes
ProtectProc=invisible
ProcSubset=pid
ProtectSystem=strict
RestrictSUIDSGID=true
SystemCallArchitectures=native
RestrictRealtime=true
LockPersonality=true
MemoryDenyWriteExecute=true
RemoveIPC=true
ProtectHostname=true
SystemCallFilter=@system-service
SystemCallFilter=~@privileged @resources
SystemCallFilter=chown capset
UMask=0066
ConfigurationDirectory=asterisk
ConfigurationDirectoryMode=0750
StateDirectory=asterisk
StateDirectoryMode=0750
RuntimeDirectory=asterisk
RuntimeDirectoryMode=0750
CacheDirectory=asterisk
CacheDirectoryMode=0750
LogsDirectory=asterisk
LogsDirectoryMode=0750
ReadWritePaths=/var/spool/asterisk
Environment=HOME=/var/lib/asterisk
WorkingDirectory=/var/lib/asterisk
StandardOutput=null
LoadCredential=tls:/etc/credstore/asterisk
ExecStart=/usr/bin/asterisk -mqf -C /etc/asterisk/asterisk.conf
ExecReload=/usr/bin/asterisk -rx 'core reload'
ExecStop=/usr/bin/asterisk -rx 'core stop now'
Type=notify
Restart=on-failure

[Install]
WantedBy=multi-user.target