#
# !!! This file is managed by Ansible !!!
#

[Unit]
Description=Rest Server
After=syslog.target
After=network.target

[Service]
Type=simple
User={{ services.rest_server.user }}
Group={{ services.rest_server.user }}
ExecStart=/usr/bin/rest-server --append-only --listen 127.0.0.1:{{ services.rest_server.port }} --no-auth --path /var/lib/rest-server --prometheus
Restart=always
RestartSec=5

# Optional security enhancements
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/var/lib/rest-server

[Install]
WantedBy=multi-user.target