1 [Unit]

     2 Description=lnd

     3 Wants=btcd.service

     4 After=btcd.service

     5 

     6 [Service]

     7 ExecStart=/usr/local/bin/lnd

     8 User={{lnd_user}}

     9 Restart=on-failure

    10 

    11 PrivateTmp=true

    12 ProtectSystem=full

    13 NoNewPrivileges=true

    14 PrivateDevices=true

    15 MemoryDenyWriteExecute=true

    16 

    17 [Install]

    18 WantedBy=multi-user.target