[Unit]
Description=Minecraft Forge server with XFEServerManager
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=minecraft
Group=minecraft
WorkingDirectory=/srv/minecraft
EnvironmentFile=-/etc/minecraft/forge.env
ExecStart=/usr/bin/java -Xms2G -Xmx6G -jar forge-server.jar --nogui
ExecStop=/bin/kill -SIGTERM $MAINPID
Restart=on-failure
RestartSec=10s
TimeoutStopSec=180s
SuccessExitStatus=0 143

# Defense in depth. ReadWritePaths must include every actual world/data path.
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/srv/minecraft
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target