[Unit]
Description=tripoli-api - auth, fichiers, métadonnées PostgreSQL
After=network.target docker.service
Requires=docker.service

[Service]
Type=simple
User=tripoli
Group=tripoli
ExecStart=/usr/local/bin/tripoli-api
Restart=on-failure
RestartSec=2
EnvironmentFile=/opt/tripoli-api/.env
Environment=RUST_LOG=info
Environment=TRIPOLI_API_LISTEN=127.0.0.1:8081
Environment=TRIPOLI_BLOB_DIR=/var/lib/tripoli-api/blobs

NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/tripoli-api

[Install]
WantedBy=multi-user.target