[Unit]
Description=MikroTik Backup System 0.0.1
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=mikrotik-backup
Group=mikrotik-backup
WorkingDirectory=/opt/mikrotik-backup
Environment=DATA_DIR=/var/lib/mikrotik-backup
Environment=LISTEN_ADDR=127.0.0.1:5581
EnvironmentFile=-/etc/mikrotik-backup.env
ExecStart=/opt/mikrotik-backup/mikrotik-backup serve
Restart=on-failure
RestartSec=5s
TimeoutStopSec=300
StateDirectory=mikrotik-backup
StateDirectoryMode=0700
UMask=0077
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictSUIDSGID=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
CapabilityBoundingSet=

[Install]
WantedBy=multi-user.target