[Unit]
Description=uWSGI daemon for CRM
After=network.target
StartLimitIntervalSec=60
StartLimitBurst=5

[Service]
Type=simple
User=tienbd
Group=nginx


RuntimeDirectory=crm
RuntimeDirectoryMode=0755
LogsDirectory=crm
LogsDirectoryMode=0750
WorkingDirectory=/home/code/crm

Environment="PATH=/home/code/env/bin"
Environment="DJANGO_SETTINGS_MODULE=core.settings"

LimitNOFILE=2000
LimitNPROC=1384

ExecStart=/home/code/env/bin/uwsgi --ini /home/code/crm/crm.ini
ExecReload=/bin/kill -s HUP $MAINPID

Restart=always
RestartSec=3
KillMode=mixed
KillSignal=SIGINT
TimeoutStopSec=30

# Resource control
MemoryAccounting=true
MemoryHigh=1G
MemoryMax=2G
IOSchedulingClass=best-effort
IOSchedulingPriority=2

PrivateTmp=true
NoNewPrivileges=true
ProtectSystem=no
ProtectHome=false
ReadWritePaths=/home/code/crm /home/code/log
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
LockPersonality=true

[Install]
WantedBy=multi-user.target