[Unit]
Description=P2Pool - Decentralized Monero Mining Pool
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=p2pool
Group=p2pool
WorkingDirectory=/var/lib/p2pool
ExecStart=/opt/p2pool/p2pool --params-file /var/lib/p2pool/params.conf
Restart=on-failure
RestartSec=10s
StandardOutput=journal
StandardError=journal
SyslogIdentifier=p2pool

# Resource limits
LimitMEMLOCK=infinity
AmbientCapabilities=CAP_IPC_LOCK

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/p2pool /var/log/p2pool

[Install]
WantedBy=multi-user.target