# systemd unit for the Outside backend.
#   sudo cp outside.service /etc/systemd/system/
#   sudo systemctl daemon-reload && sudo systemctl enable --now outside
#   journalctl -u outside -f        # logs
[Unit]
Description=Outside (Discover Lewis County creator briefs) backend
After=network.target

[Service]
Type=simple
User=www-data
Group=www-data
WorkingDirectory=/opt/outside
ExecStart=/opt/outside/outside -config /opt/outside/.config
Restart=on-failure
RestartSec=5

# Hardening: the service can only write to its own directory.
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/opt/outside
PrivateTmp=true

[Install]
WantedBy=multi-user.target