[Unit]
Description=Card collection server
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=card
Group=card
ExecStart=/usr/bin/card_collection /etc/card-collection.toml
WorkingDirectory=/var/lib/card-collection
Restart=on-failure
RestartSec=5s
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadOnlyPaths=/etc/card-collection.toml
ReadWritePaths=/var/lib/card-collection

[Install]
WantedBy=multi-user.target