[Unit]
Description=odidere
After=network.target

[Service]
ExecStart=%h/.local/bin/odidere -c %h/.config/odidere/config.yaml
Restart=on-failure

# These optional restrictions also apply to tool subprocesses.
# https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html

# Restricts system calls to the native architecture. Tools that execute
# binaries for another ABI, such as 32-bit binaries, can fail.
# SystemCallArchitectures=native

# Blocks writable executable memory. Tool runtimes that generate machine
# code can fail under this restriction.
# MemoryDenyWriteExecute=true

# Prevents privilege gains through setuid executables or file capabilities.
# Tools that rely on those privilege gains can fail.
# NoNewPrivileges=true

[Install]
WantedBy=default.target