[Unit]
Description=Valkey Sentinel instance: %i
After=network.target
PartOf=valkey-sentinel.target

[Service]
Type=notify
User=valkey
Group=valkey
PrivateTmp=true
# added automatically, for details please see
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
# end of automatic additions 
ReadWritePaths=/etc/valkey
PIDFile=/run/valkey/sentinel-%i.pid
ExecStart=/usr/bin/valkey-sentinel /etc/valkey/sentinel-%i.conf
LimitNOFILE=10240
Restart=on-failure

[Install]
WantedBy=multi-user.target valkey.target