[Unit]
Description=Archwiki Memcached Daemon
After=network.target

[Service]
User={{ archwiki_user }}
Group=memcached
ExecStart=/usr/bin/memcached -s {{ archwiki_memcached_socket }} -m {{ archwiki_memcached_memory }} -o modern
Restart=always
NoNewPrivileges=yes
PrivateTmp=yes
ProtectHome=true
PrivateDevices=yes
ProtectSystem=full
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
MemoryDenyWriteExecute=yes

[Install]
WantedBy=multi-user.target
