[Unit]
Description=Invisible Internet Project
After=network.target

[Service]
Type=forking
User=i2p
PIDFile=/run/i2p/i2p.pid
Environment=WRAPPER_CONF=/opt/i2p/wrapper.config
ExecStart=/usr/bin/java-service-wrapper ${WRAPPER_CONF} \
    wrapper.name=i2prouter wrapper.syslog.ident=i2prouter \
    wrapper.daemonize=TRUE
SendSIGKILL=no
ExecReload=/bin/kill -USR1 $MAINPID
ExecStop=/bin/kill -TERM $MAINPID
SuccessExitStatus=0 2 3
PrivateTmp=yes
PrivateDevices=yes
ReadOnlyDirectories=/etc
ReadOnlyDirectories=/usr
ReadOnlyDirectories=/var/lib
InaccessibleDirectories=-/root
InaccessibleDirectories=-/media
InaccessibleDirectories=-/boot
InaccessibleDirectories=-/home
InaccessibleDirectories=-/run/console
InaccessibleDirectories=-/run/dbus
InaccessibleDirectories=-/run/lock
InaccessibleDirectories=-/run/mount
InaccessibleDirectories=-/run/systemd/generator
InaccessibleDirectories=-/run/systemd/system
InaccessibleDirectories=-/run/systemd/users
InaccessibleDirectories=-/run/udev
InaccessibleDirectories=-/run/user
InaccessibleDirectories=-/var/lib/dbus
InaccessibleDirectories=-/var/lib/rpm
InaccessibleDirectories=-/var/lib/systemd
InaccessibleDirectories=-/var/lib/yum
InaccessibleDirectories=-/var/spool

[Install]
WantedBy=multi-user.target