[Unit]
# Managed by server-yunkong-account-install.py.
Description=Xueshang Yunkong same-origin account adapter
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=xueshang-yunkong
Group=xueshang-yunkong
WorkingDirectory=/var/www/xueshang-yunkong/app
Environment=YUNKONG_ACCOUNT_PORT=17826
ExecStart=/usr/bin/python3 -I -B /var/www/xueshang-yunkong/app/yunkong_account_proxy.py
Restart=on-failure
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
InaccessiblePaths=/var/www/xueshang-yunkong/admin /opt/nifeng-remote-control
MemoryMax=96M
TasksMax=96
LimitNOFILE=2048
UMask=0077

[Install]
WantedBy=multi-user.target
