[Unit]
Description="Threshold (fork of HashiCorp Boundary CE) - Identity-based access management for dynamic infrastructure"
Documentation=https://repo.anhonesthost.net/CyberCoveLLC/threshold
StartLimitIntervalSec=60
StartLimitBurst=3

[Service]
# Legacy HashiCorp Boundary environment file (BOUNDARY_* variables are still
# honored). Read first so that threshold.env takes precedence.
EnvironmentFile=-/etc/boundary.d/boundary.env
EnvironmentFile=-/etc/threshold.d/threshold.env
User=threshold
Group=threshold
ProtectSystem=full
ProtectHome=read-only
ExecStart=/usr/bin/threshold server -config=/etc/threshold.d/threshold.hcl
ExecReload=/bin/kill --signal HUP $MAINPID
KillMode=process
KillSignal=SIGINT
Restart=on-failure
RestartSec=5
TimeoutStopSec=30
LimitMEMLOCK=infinity

[Install]
WantedBy=multi-user.target