systemd unit service for Gitea server running against Redis

gitea.service

[Unit]
Description=Gitea (Git with a cup of tea)
After=syslog.target
After=network.target
Wants=redis-server.service
Requires=redis-server.service

[Service]
User=git
WorkingDirectory=/var/lib/gitea/
Environment=USER=git HOME=/home/git GITEA_WORK_DIR=/var/lib/gitea
ExecStart=/usr/local/bin/gitea web --config /etc/gitea/app.ini
# From <https://github.com/go-gitea/gitea/issues/13015#issuecomment-702739005>.
ExecStop=/usr/local/bin/gitea manager --config /etc/gitea/app.ini flush-queues
ExecStop=/usr/local/bin/gitea manager --config /etc/gitea/app.ini shutdown
RestartSec=2s
Restart=always
ReadWritePaths=/var/lib/gitea /home/git

# security options
NoNewPrivileges=yes
PrivateIPC=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
ProtectHostname=yes
ProtectClock=yes
ProtectProc=noaccess
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectKernelLogs=yes
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
MemoryDenyWriteExecute=yes
LockPersonality=yes

[Install]
WantedBy=multi-user.target