[Unit]
Description=Guanghu JD Application Hub
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=guanghu
Group=guanghu
WorkingDirectory=__RELEASE_ROOT__/server-tools/jd-app-hub
Environment=NODE_ENV=production
Environment=HUB_HOST=127.0.0.1
Environment=HUB_PORT=8088
Environment=GUANGHU_NODE_ID=JD-FD-PRIMARY
Environment=CODE_CHANNEL_HOST=127.0.0.1
Environment=CODE_CHANNEL_PORT=3340
ExecStart=/usr/bin/node __RELEASE_ROOT__/server-tools/jd-app-hub/server.js
Restart=always
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=strict
PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictSUIDSGID=true
LockPersonality=true
ReadOnlyPaths=__RELEASE_ROOT__

[Install]
WantedBy=multi-user.target