[Unit]
Description=Envoy Proxy
Documentation=https://www.envoyproxy.io/docs/envoy/latest/
After=network-online.target
Wants=network-online.target

[Container]
Image=docker.io/envoyproxy/envoy:v@VERSION@
ContainerName=envoy
Network=host
Volume=/etc/envoy:/etc/envoy:ro,z
Volume=/etc/localtime:/etc/localtime:ro
Environment=ENVOY_UID=128
Environment=ENVOY_GID=128
Exec=envoy -c /etc/envoy/envoy.yaml --disable-hot-restart
Ulimit=nofile=1048576:1048576
Notify=healthy
HealthCmd=bash -c 'exec 3<>/dev/tcp/127.0.0.1/9901 && { echo "GET /ready HTTP/1.1"; echo "Host: localhost"; echo "Connection: close"; echo; } >&3 && grep -q LIVE <&3'
HealthInterval=30s
HealthTimeout=10s
HealthRetries=5
HealthStartPeriod=30s
HealthOnFailure=kill
LogDriver=journald

[Service]
Restart=always
RestartSec=5
TimeoutStartSec=900