[Unit]
Description=Hardware monitoring dashboard on LAN port 8090
After=network.target hardware-watch.timer

[Service]
Type=simple
User=hardware-dashboard
Group=hardware-watch
WorkingDirectory=/opt/hardware-dashboard
ExecStart=/usr/bin/python3 /opt/hardware-dashboard/server.py --port 8090
Restart=always
RestartSec=5
Environment=PYTHONDONTWRITEBYTECODE=1
Environment=TZ=Asia/Shanghai
StateDirectory=hardware-dashboard
StateDirectoryMode=0750
UMask=0027
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ProtectKernelTunables=true
ProtectControlGroups=true
ReadWritePaths=/var/lib/hardware-dashboard
MemoryMax=384M
Nice=10

[Install]
WantedBy=multi-user.target