[Unit]
Description=CGI HTTP instance %i
After=network.target

[Service]
Type=simple
EnvironmentFile=/etc/gocgi/%i.conf
ExecStart=/usr/bin/gocgi --path "${GOCGI_BIN}" --dir "${GOCGI_WORKDIR}" --env="${GOCGI_ENV}" --listen "${STATE_DIRECTORY}/%i.sock"

RuntimeDirectory=gocgi
DynamicUser=yes
ProtectSystem=yes
PrivateDevices=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes

[Install]
WantedBy=multi-user.target