bitcoin service files

bitcoind-online.service

[Unit]
BindsTo=bitcoind.service
After=bitcoind.service

[Service]
User=bitcoin
Group=bitcoin

Type=notify
ExecStart=/bin/sh -c 'while sleep 10; do /home/bitcoin/bin/bitcoin-cli ping && exec /usr/bin/systemd-notify --ready; done'
RemainAfterExit=yes
SyslogIdentifier=bitcoind-online
TimeoutStartSec=600s

CPUQuota=10%

[Install]
WantedBy=multi-user.target

bitcoind.service

[Unit]
Description=Bitcoin's distributed currency daemon
After=tor.service network.target

[Service]
User=bitcoin
Group=bitcoin

RuntimeDirectory=bitcoind
PIDFile=/run/bitcoind/bitcoind.pid
Environment=MALLOC_ARENA_MAX=1
ExecStart=/home/bitcoin/bin/bitcoind -server -pid=/run/bitcoind/bitcoind.pid -printtoconsole

Restart=always
TimeoutStopSec=120s
StartLimitInterval=120s
StartLimitBurst=5

# Hardening measures
####################

# Provide a private /tmp and /var/tmp.
PrivateTmp=true

# Mount /usr, /boot/ and /etc read-only for the process.
ProtectSystem=full

# Disallow the process and all of its children to gain
# new privileges through execve().
NoNewPrivileges=true

# Use a new /dev namespace only populated with API pseudo devices
# such as /dev/null, /dev/zero and /dev/random.
PrivateDevices=true

# Deny the creation of writable and executable memory mappings.
MemoryDenyWriteExecute=true

[Install]
WantedBy=multi-user.target

lnd.service

[Unit]
BindsTo=bitcoind-online.service
After=bitcoind-online.service network.target

[Service]
User=bitcoin
Group=bitcoin

PIDFile=/run/lnd.pid
Environment=MALLOC_ARENA_MAX=1
ExecStart=/home/bitcoin/bin/lnd

Restart=always
PrivateTmp=true
TimeoutStopSec=60s
TimeoutStartSec=2s
StartLimitInterval=120s
StartLimitBurst=5

[Install]
WantedBy=multi-user.target