[Unit]
Description=Drone Runner (Docker)
After=network.target

[Service]
User=drone-agent
Group=docker
Type=simple
EnvironmentFile=/etc/drone/agent
ExecStart=/usr/bin/drone-runner-docker
ExecReload=/usr/bin/kill -HUP $MAINPID
Restart=on-failure
KillSignal=SIGINT
LimitNOFILE=8192
PrivateDevices=yes
DynamicUser=yes
ReadWritePaths=/var/run/docker.sock

[Install]
WantedBy=multi-user.target