[Unit]
Description=NODE.DC infrastructure host telemetry agent
Documentation=https://docs.influxdata.com/telegraf/v1/
After=network-online.target nodedc-device-edge-channel.service
Wants=network-online.target
Requires=nodedc-device-edge-channel.service

[Service]
Type=notify
NotifyAccess=all
User=nodedc-telemetry
Group=nodedc-telemetry
ExecStart=/opt/nodedc-b2-vps/runtime/telegraf/usr/bin/telegraf --config /opt/nodedc-b2-vps/vps/config/nodedc-host-telemetry-telegraf.conf
Restart=always
RestartSec=3
TimeoutStartSec=30
TimeoutStopSec=15
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
ProtectClock=yes
ProtectHostname=yes
RestrictSUIDSGID=yes
RestrictRealtime=yes
LockPersonality=yes
MemoryDenyWriteExecute=no
SystemCallArchitectures=native
RestrictAddressFamilies=AF_UNIX AF_INET
IPAddressDeny=any
IPAddressAllow=localhost
CapabilityBoundingSet=
AmbientCapabilities=
UMask=0077
MemoryMax=96M
MemorySwapMax=0
CPUQuota=15%
TasksMax=64
LimitNOFILE=512

[Install]
WantedBy=multi-user.target