[Unit]
Description=nginx-logtail aggregator
Documentation=man:nginx-logtail(8)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=_logtail
Group=_logtail
EnvironmentFile=-/etc/default/nginx-logtail
ExecStart=/usr/sbin/nginx-logtail-aggregator $AGGREGATOR_ARGS
Restart=on-failure
RestartSec=5

# Aggregator needs no filesystem access beyond its binary.
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes
NoNewPrivileges=yes

[Install]
WantedBy=multi-user.target