[Unit]
Description=SD Park Pass Monitor
Documentation=https://git.null-t.org/aramcs/sd-park-pass-ntfy
After=network.target

[Service]
Type=simple
User=nobody
WorkingDirectory=/opt/sd-park-pass-ntfy
ExecStart=/usr/bin/node index.js
Restart=on-failure
RestartSec=10
KillMode=mixed
KillSignal=SIGINT

# Security settings
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ReadWritePaths=/opt/sd-park-pass-ntfy
ProtectHome=true
PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true

# Environment
Environment=NODE_ENV=production

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=sd-park-pass-ntfy

[Install]
WantedBy=multi-user.target