[Unit]
Description=PHP Cloudlinux SSA Agent Service
After=network.target ssa-agent.socket
Requires=ssa-agent.socket

[Service]
Type=simple
Restart=on-failure
RestartSec=3
TimeoutSec=120s
LimitNOFILE=65535
TasksMax=100
MemoryMax=1G
MemoryHigh=768M

NoNewPrivileges=yes
CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_CHOWN CAP_SETUID CAP_SETGID
ProtectSystem=strict
ReadWritePaths=/var/lve /var/log/clos_ssa /opt/alt /usr/share/clos_ssa /home /var/cagefs
PrivateTmp=yes
RestrictNamespaces=yes
RestrictSUIDSGID=yes
PrivateDevices=yes
ProtectControlGroups=yes

ExecStart=/usr/sbin/cloudlinux-ssa-agent

[Install]
WantedBy=multi-user.target