[Unit]
Description=SSX 3 Lobby Server
Wants=network-online.target
After=network-online.target

[Service]
# TODO: Import code so we can do Type=notify?
Type=simple

Restart=always
RestartSec=10

User=lobbyserver
Group=lobbyserver

WorkingDirectory=/srv/lobbyserver
ExecStart=/srv/lobbyserver/lobbyserver

# limits
OOMScoreAdjust=200
CPUQuota=100%
IOWeight=50
# ram limits, may be amended at some point
# but i don't think the server will be *that* much of a hog
MemoryHigh=820M
MemoryMax=1G

# Hardening
PrivateTmp=true
NoNewPrivileges=true
RestrictNamespaces=true
ProtectSystem=strict
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
PrivateDevices=yes
RestrictSUIDSGID=true

[Install]
WantedBy=multi-user.target