[Unit] Description=Advanced key-value store After=network.target [Service] Type=notify User=keydb Group=keydb ExecStart=/usr/bin/keydb-server /etc/keydb/keydb.conf TimeoutStartSec=60 TimeoutStopSec=60 CapabilityBoundingSet= PrivateTmp=true PrivateDevices=true ProtectSystem=full ProtectHome=true NoNewPrivileges=true RuntimeDirectory=keydb RuntimeDirectoryMode=755 LimitNOFILE=10032 [Install] WantedBy=multi-user.target