[Unit]
Description=FreeRADIUS high performance RADIUS server.
After=network-online.target ipa.service dirsrv.target krb5kdc.service mysql.service mariadb.service postgresql.service

[Service]
Type=notify
WatchdogSec=60
NotifyAccess=all
User=radiusd
Group=radiusd

Environment=HOSTNAME=%H
ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap
ExecStartPre=/usr/sbin/radiusd -Cx -lstdout
ExecStart=/usr/sbin/radiusd
ExecReload=/usr/sbin/radiusd -Cxm -lstdout
ExecReload=/bin/kill -HUP $MAINPID

Restart=on-failure
RestartSec=5

NoNewPrivileges=true
PrivateTmp=true
ProtectControlGroups=true
ProtectKernelModules=true
ProtectKernelTunables=true
SystemCallArchitectures=native
ReadOnlyDirectories=/etc/raddb
ReadWriteDirectories=/var/log/radius

[Install]
WantedBy=multi-user.target
