[Unit]
After=network.target mongodb.service
Description=SafeNSound Service
Requires=mongodb.service

[Service]
Environment="DATABASE_SECRET_PATH=/run/credentials/safensound.service/mongodb"
Environment="JWT_SECRET_PATH=/var/lib/SafeNSound"
Environment="LOG_AUTH=true"
Environment="LOG_QUERIES=true"
Environment="LOG_REQUESTS=-"
Environment="PORT=7645"
DynamicUser=true
ExecStart=/usr/bin/env node /opt/SafeNSound
LoadCredential=mongodb:/data/secrets/safensound-mongodb
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=strict
Restart=always
StartLimitBurst=600
StartLimitIntervalSec=60
StateDirectory=SafeNSound
StateDirectoryMode=0700
Type=simple
WorkingDirectory=/var/lib/SafeNSound

[Install]
WantedBy=multi-user.target