[Unit] Description=A distributed, fault-tolerant Jabber/XMPP server Requires=network-online.target After=network-online.target [Service] Type=notify NotifyAccess=all User=ejabberd Group=ejabberd LimitNOFILE=16000 RestartSec=5 ExecStart=/usr/bin/bash /usr/bin/ejabberdctl \ --config /etc/ejabberd/ejabberd.yml \ --ctl-config /etc/ejabberd/ejabberdctl.cfg \ --logs "/var/log/ejabberd" \ --spool "/var/lib/ejabberd" start ExecStop=/usr/bin/bash /usr/bin/ejabberdctl stop RemainAfterExit=yes # The CAP_DAC_OVERRIDE capability is required for pam authentication to work CapabilityBoundingSet=CAP_DAC_OVERRIDE PrivateTmp=true PrivateDevices=true ProtectHome=true ProtectSystem=full [Install] WantedBy=multi-user.target