[Unit]
Description=VictoriaMetrics time-series database
Documentation=https://docs.victoriametrics.com/
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User={{ victoriametrics_user }}
Group={{ victoriametrics_group }}

ExecStart=/usr/local/bin/victoria-metrics-prod \
  -storageDataPath={{ victoriametrics_data_dir }} \
  -retentionPeriod={{ victoriametrics_retention_period }} \
  -httpListenAddr={{ victoriametrics_listen_address }} \
  -promscrape.config={{ victoriametrics_scrape_config_file }} \
  -memory.allowedPercent={{ victoriametrics_memory_allowed_percent }} \
  -storage.minFreeDiskSpaceBytes={{ victoriametrics_storage_min_free_disk_space_bytes }}

ExecReload=/bin/kill -HUP $MAINPID

Restart=on-failure
RestartSec=5s

# Security hardening
{% if victoriametrics_systemd_security %}
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths={{ victoriametrics_data_dir }}
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictRealtime=true
RestrictNamespaces=true
LockPersonality=true
{% endif %}

[Install]
WantedBy=multi-user.target