File redmine.service of Package redmine

[Unit]
Description=Redmine Project Management (Puma)
Documentation=https://www.redmine.org/projects/redmine/wiki
After=redmine-update.service
Requires=network.target redmine-update.service redmine.socket
Wants=redmine-sidekiq.service

StartLimitIntervalSec=10
StartLimitBurst=2

[Service]
AppArmorProfile=%N

Type=notify
WatchdogSec=10

User=%N
Group=%N

Environment="RUBY_GC_MALLOC_LIMIT=90000000"

RuntimeDirectory=%N
WorkingDirectory=/srv/www/vhosts/redmine/

ExecStart=/usr/bin/bundle.@RUBY_SUFFIX@ exec /usr/bin/puma.@RUBY_SUFFIX@ -C /etc/redmine/puma.rb

SyslogIdentifier=%N

Restart=on-failure

RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
ProtectControlGroups=yes
PrivateDevices=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectSystem=strict
PrivateTmp=yes

ReadWritePaths=/srv/www/vhosts/redmine/public/assets/.manifest.json
ReadWritePaths=/srv/www/vhosts/redmine/public/plugin_assets
ReadWritePaths=/srv/www/vhosts/redmine/tmp
ReadWritePaths=/var/lib/redmine
ReadWritePaths=/var/log/redmine

[Install]
WantedBy=multi-user.target