postgrest systemd scripts

postgrest@.service

[Unit]
Description=REST API for any Postgres database
After=postgresql.target network.target
Documentation=https://postgrest.org/en/stable/

[Service]
Type=exec
ExecStart=/usr/bin/postgrest /etc/postgrest/%i.conf
ExecStop=/bin/kill -s HUP $MAINPID
ExecReload=/bin/kill -s SIGUSR2 $MAINPID
TimeoutStopSec=0
Restart=always

UMask=007
PrivateTmp=yes
LimitNOFILE=65535
PrivateDevices=yes
ProtectHome=yes
ReadOnlyDirectories=/
NoNewPrivileges=true
CapabilityBoundingSet=
MemoryDenyWriteExecute=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectControlGroups=true
RestrictRealtime=true
RestrictNamespaces=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX

ProtectSystem=full
DynamicUser=yes

ConfigurationDirectory=postgrest

[Install]
WantedBy=multi-user.target