2 Description=Prometheus service
3 Requires=network-online.target
4 After=network-online.target
10 WorkingDirectory=/usr/share/prometheus
11 EnvironmentFile=-/etc/conf.d/prometheus
12 ExecStart=/usr/bin/prometheus --config.file=/etc/prometheus/prometheus.yml --storage.tsdb.path=/var/lib/prometheus/data $PROMETHEUS_ARGS
13 ExecReload=/bin/kill -HUP $MAINPID
19 ProtectControlGroups=true
20 ProtectKernelModules=true
21 ProtectKernelTunables=true
24 RestrictNamespaces=yes
25 MemoryDenyWriteExecute=yes
27 CapabilityBoundingSet=
30 WantedBy=multi-user.target