[Unit]
Description=App.Web
After=network.target

[Service]
ExecStart=/usr/bin/env /home/pardnltd/node/node_modules/.bin/ts-node /home/pardnltd/node/app.ts
ExecStop=/bin/kill -SIGTERM $MAINPID
ExecReload=/bin/kill -HUP $MAINPID
Restart=always
RestartSec=10
RestartPreventExitStatus=1
User=pardnltd
Group=pardnltd
Environment=PATH=/usr/bin:/usr/local/bin
Environment=ENV=release
WorkingDirectory=/home/pardnltd/node
StandardOutput=append:/home/pardnltd/node/storage/logs/out.log
StandardError=append:/home/pardnltd/node/storage/logs/err.log
LimitNOFILE=65536
TimeoutStartSec=30
TimeoutStopSec=30
MemoryLimit=1024M
CPUShares=1024
KillMode=control-group
ProtectSystem=full
ProtectHome=false
PrivateTmp=true
NoNewPrivileges=true
ReadOnlyPaths=/etc
ReadWritePaths=/home/pardnltd/node
InaccessiblePaths=/root /sys /proc /dev
ProtectKernelModules=true
ProtectControlGroups=true
ProtectHostname=true
ProtectClock=true
ProtectKernelLogs=true
ProtectProc=invisible
ProtectKernelTunables=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX

[Install]
WantedBy=multi-user.target