[Unit]
Description=Valkey persistent key-value database
After=network.target
After=network-online.target
Wants=network-online.target

[Service]
WorkingDirectory=/var/lib/valkey
EnvironmentFile=-/etc/sysconfig/valkey
# moved $OPTIONS to start because the --dir option only overrides the config if it is passed before
# the config to the binary.  I think this is a bug and will be reporting it upstream as all other
# opts don't care about the order for the override to work
ExecStart=/usr/bin/valkey-server /etc/valkey/valkey.conf --daemonize no --supervised systemd $OPTIONS
Type=notify
User=valkey
Group=valkey
RuntimeDirectory=valkey
RuntimeDirectoryMode=0755
PrivateTmp=true
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true

[Install]
WantedBy=multi-user.target