[Unit]
Description=Imunify360 agent
Before=cagefs.service
After=imunify360.service network.target iptables.service firewalld.service
Wants=imunify360.service imunify360-agent.socket imunify360-agent-user.socket
# Service will NOT start if this file exists
ConditionPathExists=!/var/lib/rpm-state/imunify360-transaction-in-progress

[Service]
CPUAccounting=true
MemoryAccounting=true
BlockIOAccounting=true
Slice=Imunify-agent_non_resident.slice
Environment=PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION=upb
Environment=LANG=en_US.UTF-8
Environment=LC_ALL=en_US.UTF-8
Environment=PYTHONNOUSERSITE=1
Environment=SQLITE_TMPDIR=/var/imunify360/tmp
Environment=I360_SOCKET_ACTIVATION=1
Type=simple
ExecStartPre=/usr/share/imunify360/scripts/set-service-resources.sh imunify360-agent.service 50 50
ExecStart=/opt/imunify360/venv/bin/python3 -m im360.run
ExecStartPost=/bin/bash -c "echo $MAINPID > /var/run/imunify360-agent.pid"
ExecStartPost=/bin/systemctl restart imunify360-resource-unlock@imunify360-agent.timer
PIDFile=/var/run/imunify360-agent.pid
#TODO: must be not less than defence360agent/cli/server.py:stop(seconds=8)
TimeoutStartSec=900
TimeoutStopSec=60
RestartSec=5
StartLimitInterval=600s
StartLimitBurst=15
# Orphans child processes instead of killing them when the main process is shut down.
KillMode=process

[Install]
WantedBy=multi-user.target