[Unit]
Description=TeXise TexLab Docker gateway
After=network-online.target docker.service
Wants=network-online.target
Requires=docker.service

[Service]
Type=simple
WorkingDirectory=/var/www/texise.com/public_html/texise-services/console-gateway
Environment=NODE_ENV=production
EnvironmentFile=/etc/texise/console-gateway.env
ExecStart=/usr/bin/node /var/www/texise.com/public_html/texise-services/console-gateway/server.js
Restart=always
RestartSec=5
User=texise-console
Group=texise-console
SupplementaryGroups=docker
NoNewPrivileges=true
PrivateTmp=true
PrivateDevices=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemCallArchitectures=native
UMask=0027
ReadOnlyPaths=/var/www/texise.com/public_html/texise-services/console-gateway
ReadWritePaths=/var/www/texise.com/public_html/texise-data/tmp/console
InaccessiblePaths=/etc/texise
LockPersonality=true
RestrictSUIDSGID=true

[Install]
WantedBy=multi-user.target