[Unit]
Description=Smartbotic MicroBit Service
Documentation=https://git.smartbotics.ai/fszontagh/smartbotic-microbit
After=network.target smartbotic-database.service
Wants=smartbotic-database.service

[Service]
Type=notify
ExecStart=/opt/smartbotic/bin/smartbotic-microbit --config /etc/smartbotic/microbit.json
Restart=on-failure
RestartSec=5
TimeoutStartSec=30
TimeoutStopSec=30
WatchdogSec=30

# User/Group
User=smartbotic
Group=smartbotic

# Environment
EnvironmentFile=-/etc/smartbotic/smartbotic.env
Environment=LOG_LEVEL=info

# Working directory
WorkingDirectory=/var/lib/smartbotic/microbit

# Security hardening
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=true
PrivateTmp=yes
MemoryDenyWriteExecute=true
SystemCallFilter=@system-service

# Writable paths
ReadWritePaths=/var/lib/smartbotic/microbit /var/log/smartbotic

# Resource limits
LimitNOFILE=65536
LimitNPROC=4096

[Install]
WantedBy=multi-user.target