# Binary mode: install with  sudo ./kit.sh install-service
# Assumes a "git" system user, binary at /usr/local/bin/gitea, data in /var/lib/gitea,
# config in /etc/gitea/app.ini (the defaults in .env.example).
[Unit]
Description=Gitea (gitea-selfhost)
After=network.target

[Service]
Type=simple
User=git
Group=git
WorkingDirectory=/var/lib/gitea
ExecStart=/usr/local/bin/gitea web --config /etc/gitea/app.ini --work-path /var/lib/gitea
Restart=always
RestartSec=5
Environment=USER=git HOME=/home/git GITEA_WORK_DIR=/var/lib/gitea
# Hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ReadWritePaths=/var/lib/gitea /etc/gitea

[Install]
WantedBy=multi-user.target