[Unit]
Description=Gogs
After=syslog.target
After=network.target
After=mariadb.service

[Service]
Type=simple
User=git
Group=git
WorkingDirectory=/opt/gogs
ExecStart=/opt/gogs/gogs web
Restart=always
Environment=USER=git HOME=/opt/gogs
AmbientCapabilities=CAP_NET_BIND_SERVICE

# Some distributions may not support these hardening directives. If you cannot start th>
# to an unknown option, comment out the ones not supported by your version of systemd.
#ProtectSystem=full
#PrivateDevices=yes
PrivateTmp=yes
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target