[Unit]
Description=Apache Kafka Broker (KRaft mode)
Documentation=https://kafka.apache.org/documentation/
After=network-online.target cluster-detect.service
Wants=network-online.target

[Service]
Type=simple
User=kafka
Group=kafka
EnvironmentFile=/etc/cluster-config/environment/kafka.env
Environment="KAFKA_HEAP_OPTS=-Xmx2G -Xms2G"
Environment="KAFKA_JVM_PERFORMANCE_OPTS=-XX:+UseG1GC -XX:MaxGCPauseMillis=20 -XX:InitiatingHeapOccupancyPercent=35 -XX:G1HeapRegionSize=16M -XX:MinMetaspaceFreeRatio=50 -XX:MaxMetaspaceFreeRatio=80"

ExecStartPre=/usr/local/bin/kafka-config-generator.sh
ExecStart=/opt/kafka/bin/kafka-server-start.sh /var/lib/kafka/server.properties

# Graceful shutdown
TimeoutStopSec=180
SuccessExitStatus=143

Restart=always
RestartSec=10

# Security
NoNewPrivileges=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths=/var/lib/kafka /var/log/kafka

LimitNOFILE=100000

[Install]
WantedBy=kafka.target