[Unit]
Description=dpl isolated AnyTLS node backend
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
WorkingDirectory=/var/lib/dpl-node
EnvironmentFile=/etc/dpl-node/secret.env
ExecStart=/opt/dpl-node/xboard-node -c /etc/dpl-node/config.yml
Restart=on-failure
RestartSec=10
UMask=0077
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/dpl-node
MemoryHigh=450M
MemoryMax=600M
CPUQuota=100%
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target