[Unit]
Description=Monitor-Check Upload- und Web-Server
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=monitor
Group=monitor
WorkingDirectory=/opt/monitor-check/server
EnvironmentFile=/opt/monitor-check/server/.env
ExecStart=/usr/bin/node /opt/monitor-check/server/server.js
Restart=always
RestartSec=3

# Haertung
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/monitor-check
ProtectKernelTunables=true
ProtectControlGroups=true
RestrictSUIDSGID=true
LockPersonality=true

StandardOutput=journal
StandardError=journal
SyslogIdentifier=monitor-check

[Install]
WantedBy=multi-user.target