gistfile1.txt

  systemd.services = {
    serveHTTP = {
      description = "serveHTTP";
      wantedBy = [ "multi-user.target" ];
      after = [ "network.target" ];
      serviceConfig = {
        Restart = "on-failure";
        RestartSec = "1";
        StartLimitInterval = "0";
        PrivateDevices = true;
        NoNewPrivileges = true;
        ExecStart = "/root/code/gopath/bin/serveHTTP -h1=localhost:8080 -h2=localhost:8081";
        WorkingDirectory = "/root/code/gopath/src/github.com/nhooyr/avonDieselEmission";
        ProtectSystem = "full";
        RestrictAddressFamilies = "AF_INET AF_INET6";
      };
    };

    avonDieselEmission = {
      description = "Avon Diesel Emission Website";
      wantedBy = [ "multi-user.target" ];
      after = [ "network.target" ];
      serviceConfig = {
        Restart = "on-failure";
        RestartSec = "1";
        StartLimitInterval = "0";
        PrivateDevices = true;
        NoNewPrivileges = true;
        ExecStart = "/root/code/gopath/bin/serveHTTP -h1=localhost:8082 -h2=localhost:8083";
        WorkingDirectory = "/root/code/gopath/src/github.com/nhooyr/avonDieselEmission";
        ProtectSystem = "full";
        RestrictAddressFamilies = "AF_INET AF_INET6";
      };
    };

    radioGraydon = {
      description = "radioGraydon";
      wantedBy = [ "multi-user.target" ];
      after = [ "network.target" "postgresql.service" ];
      serviceConfig = {
        Restart = "on-failure";
        RestartSec = "1";
        StartLimitInterval = "0";
        PrivateDevices = true;
        NoNewPrivileges = true;
        ExecStart = "/root/code/gopath/bin/radioGraydon -h1=localhost:8084 -h2=localhost:8085";
        ProtectSystem = "full";
        RestrictAddressFamilies = "AF_INET AF_INET6";
      };
    };

    redirectHTTP = {
      description = "redirect HTTP to HTTPS";
      wantedBy = [ "multi-user.target" ];
      after = [ "network.target" ];
      serviceConfig = {
        Restart = "on-failure";
        RestartSec = "1";
        StartLimitInterval = "0";
        PrivateDevices = true;
        NoNewPrivileges = true;
        ExecStart = "/root/code/gopath/bin/redirectHTTP";
        ProtectSystem = "full";
        RestrictAddressFamilies = "AF_INET AF_INET6";
      };
    };
  };