[Unit]
Description=FAPG DAQ sensor node
Wants=network-online.target
After=network-online.target

[Service]
Type=simple
User=fapg-daq
Group=fapg-daq
SupplementaryGroups=dialout

RuntimeDirectory=fapg-daq
RuntimeDirectoryMode=0750
ReadWritePaths=/run/fapg-daq
ReadWritePaths=/var/lib/fapg-daq

WorkingDirectory=/opt/fapg/fapg-daq
EnvironmentFile=/etc/fapg-daq/daq.conf

ExecStart=/opt/fapg/fapg-daq/roles/daq-node/bin/fapg-daq-node

Restart=always
RestartSec=5

# Basic hardening. Do not enable PrivateDevices=true because this service needs /dev/ttyUSB0.
NoNewPrivileges=true
ProtectHome=true
ProtectSystem=strict

[Install]
WantedBy=multi-user.target