File redmine-sidekiq.service of Package redmine

[Unit]
Description=Redmine Background Tasks Worker
Requires=network.target

[Service]
AppArmorProfile=redmine-sidekiq

Type=notify
NotifyAccess=all
WatchdogSec=10
Restart=on-failure
RestartSec=1

User=redmine
Group=redmine

Environment=MALLOC_ARENA_MAX=2
WorkingDirectory=/srv/www/vhosts/redmine/
ExecStart=/usr/bin/bundle.@RUBY_SUFFIX@ exec /usr/bin/sidekiq.@RUBY_SUFFIX@ -e production -q mailers
SyslogIdentifier=redmine-sidekiq

RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
ProtectControlGroups=yes
PrivateDevices=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectSystem=strict
PrivateTmp=yes

ReadWritePaths=/var/log/redmine
ReadWritePaths=/srv/www/vhosts/redmine/public/assets/.manifest.json

[Install]
WantedBy=multi-user.target