[Unit]
Description=Bitcoin daemon
After=network.target

[Service]
Type=notify
NotifyAccess=all
ExecStart=BITCOIND --daemonwait --server --pid=HOME/.bitcoin/bitcoind.pid

Type=forking
PIDFile=HOME/.bitcoin/bitcoind.pid
Restart=on-failure

KillSignal=SIGINT
LimitNOFILE=32768
User=USER
Group=USER

# Hardening
PrivateTmp=yes
PrivateDevices=yes
MemoryDenyWriteExecute=true

[Install]
WantedBy=multi-user.target