auth-server.service

[Unit]
Description=Authentication server for nginx
BindsTo=nginx.service

[Service]
RuntimeDirectory=auth-server
Environment="LISTEN=unix:/run/auth-server/listen.sock"
Environment="SOCKET_GROUP=http-auth"
EnvironmentFile=/etc/conf.d/auth-server
SupplementaryGroups=http-auth

ExecStart=/usr/bin/auth-server
Restart=on-failure

DynamicUser=yes
ProtectSystem=strict
PrivateTmp=true
PrivateDevices=true
ProtectKernelTunables=true
ProtectControlGroups=true
SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target