[Unit] Description=CDN LVS Agent Service After=network.target Wants=network.target [Service] Type=simple User=root Group=root WorkingDirectory=/opt/cdn-lvs-agent ExecStart=/opt/cdn-lvs-agent/bin/server --conf /opt/cdn-lvs-agent/configs/ ExecReload=/bin/kill -HUP $MAINPID Restart=always RestartSec=5 StandardOutput=journal StandardError=journal SyslogIdentifier=cdn-lvs-agent # 安全设置 - 放宽限制以允许写入系统目录 NoNewPrivileges=true ProtectSystem=false ProtectHome=true PrivateTmp=true # 资源限制 LimitNOFILE=65536 LimitNPROC=32768 [Install] WantedBy=multi-user.target