[Unit]
Description=Filebrowser - A web file browser written in golang
After=network.target
StartLimitIntervalSec=60
StartLimitBurst=4

[Service]
User=filebrowser
Group=filebrowser
ExecStart=/usr/bin/filebrowser -c /etc/filebrowser/filebrowser.toml -d /var/lib/filebrowser/filebrowser.db
Restart=on-failure
RestartSec=1

# Hardening
ProtectSystem=full
PrivateTmp=true
SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target