[Unit]
Description=Ceph OSD daemon (osd.%i)
Documentation=https://docs.ceph.com/
PartOf=ceph-osd.target
After=network-online.target local-fs.target time-sync.target cluster-detect.service
Wants=network-online.target local-fs.target time-sync.target

[Service]
Type=notify
EnvironmentFile=/etc/cluster-config/environment/ceph.env
ExecStartPre=/usr/local/bin/ceph-osd-init.sh %i
ExecStart=/usr/bin/ceph-osd -f --cluster ceph --id %i --setuser ceph --setgroup ceph
ExecStartPost=/usr/bin/ceph osd crush create-or-move -- %i ${OSD_WEIGHT} root=default host=$(hostname -s)

# Resource management
LimitNOFILE=1048576
LimitNPROC=1048576

Restart=on-failure
RestartSec=10
StartLimitInterval=30min
StartLimitBurst=5

# Security
NoNewPrivileges=true
ProtectHome=true
ProtectSystem=full
PrivateTmp=true

[Install]
WantedBy=ceph-osd.target