[Unit]
Description=YAMN persistent Nym sender
Documentation=https://docs.rs/nym-sdk/latest/nym_sdk/
Wants=network-online.target
After=network-online.target

[Service]
Type=simple
User=www-data
Group=www-data
EnvironmentFile=/etc/yamnweb/yamnweb.env
ExecStart=/usr/local/bin/yamn-nym-submit --daemon
Restart=on-failure
RestartSec=10s
TimeoutStopSec=250s
RuntimeDirectory=yamnweb
RuntimeDirectoryMode=0700
UMask=0077
NoNewPrivileges=true
PrivateTmp=true
PrivateDevices=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths=/var/lib/yamnweb/nym-client /run/yamnweb
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
RestrictSUIDSGID=true
LockPersonality=true
MemoryDenyWriteExecute=true
CapabilityBoundingSet=
AmbientCapabilities=
StandardOutput=null
StandardError=journal

[Install]
WantedBy=multi-user.target