[Unit]
Description=LisgloSIPS PostgreSQL Exporter
After=postgresql.service
Requires=postgresql.service

[Service]
Type=simple
User=prometheus
Group=prometheus
EnvironmentFile=/etc/lisglosips/secrets/postgres-exporter.env
ExecStart=/usr/bin/prometheus-postgres-exporter --web.listen-address=127.0.0.1:9187
Restart=on-failure
RestartSec=3s
NoNewPrivileges=true
PrivateTmp=true
PrivateDevices=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictSUIDSGID=true
LockPersonality=true
CapabilityBoundingSet=
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6

[Install]
WantedBy=multi-user.target