[Unit]
Description=Reelbox HTTPS download website
After=network.target

[Service]
Type=simple
RuntimeDirectory=reelbox-web
RuntimeDirectoryMode=0755
ExecStartPre=/usr/sbin/nginx -t -c /etc/reelbox/nginx.conf
ExecStart=/usr/sbin/nginx -c /etc/reelbox/nginx.conf -g "daemon off;"
ExecReload=/usr/sbin/nginx -t -c /etc/reelbox/nginx.conf
ExecReload=/usr/sbin/nginx -c /etc/reelbox/nginx.conf -s reload
KillSignal=SIGQUIT
TimeoutStopSec=15
Restart=on-failure
RestartSec=3
PrivateTmp=true
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
ReadWritePaths=/run/reelbox-web /var/log/reelbox
MemoryMax=64M
TasksMax=16
LimitNOFILE=2048

[Install]
WantedBy=multi-user.target