[Unit]
Description=Apache with PHP 5.4
After=network.target remote-fs.target nss-lookup.target

[Service]
Type=forking
RootDirectory=/chroot/httpd54
RootDirectoryStartOnly=no

Environment=APACHE_STARTED_BY_SYSTEMD=true

ExecStart=/usr/sbin/apache2ctl-54 start
ExecStop=/usr/sbin/apache2ctl-54 stop
ExecReload=/usr/sbin/apache2ctl-54 graceful

Restart=on-abort

UMask=002


NoNewPrivileges=true

PrivateDevices=true
PrivateTmp=true
ProtectHome=true
ProtectKernelModules=true

ReadOnlyPaths=/chroot/httpd54
ReadWritePaths=/chroot/httpd54/web
ReadWritePaths=/chroot/httpd54/var/log/apache2
ReadWritePaths=/chroot/httpd54/run

# jessie compatibility
ReadOnlyDirectories=/chroot/httpd54/bin
ReadOnlyDirectories=/chroot/httpd54/boot
ReadOnlyDirectories=/chroot/httpd54/etc
ReadOnlyDirectories=/chroot/httpd54/home
ReadOnlyDirectories=/chroot/httpd54/lib
ReadOnlyDirectories=/chroot/httpd54/lib64
ReadOnlyDirectories=/chroot/httpd54/mnt
ReadOnlyDirectories=/chroot/httpd54/media
ReadOnlyDirectories=/chroot/httpd54/opt
ReadOnlyDirectories=/chroot/httpd54/root
ReadOnlyDirectories=/chroot/httpd54/sbin
ReadOnlyDirectories=/chroot/httpd54/srv
ReadOnlyDirectories=/chroot/httpd54/usr
ReadOnlyDirectories=/chroot/httpd54/var

ReadWriteDirectories=/chroot/httpd54/web
ReadWriteDirectories=/chroot/httpd54/var/log/apache2
ReadWriteDirectories=/chroot/httpd54/run


[Install]
WantedBy=multi-user.target