# This file is shipped as part of the Takahe package.
# Author: Georg Pfuetzenreuter <mail+rpm@georg-pfuetzenreuter.net>

[Unit]
Description=Takahe Stator
PartOf=takahe.target

[Service]
User=_takahe
Group=_takahe

ExecStart=/usr/libexec/takahe/manage.py runstator

PrivateDevices=yes
PrivateTmp=yes
ProtectControlGroups=yes
ProtectHome=yes
ProtectKernelLogs=yes
ProtectSystem=strict
RestrictAddressFamilies=AF_INET6 AF_INET
SystemCallArchitectures=native
SystemCallFilter=@system-service

[Install]
WantedBy=multi-user.target