[Unit]
Description=EDUT Secret API backend
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=edut
Group=edut
WorkingDirectory=/opt/edut/secretapi
EnvironmentFile=/etc/edut/secretapi.env
ExecStart=/opt/edut/secretapi/secretapi
Restart=always
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/edut

[Install]
WantedBy=multi-user.target