[Unit]
Description=SecuBox DNS Provider API
After=network.target secubox-core.service
Wants=secubox-core.service

[Service]
Type=simple
User=secubox
Group=secubox
WorkingDirectory=/usr/lib/secubox/dns-provider
ExecStart=/usr/bin/python3 -m uvicorn api.main:app --uds /run/secubox/dns-provider.sock --log-level warning
Restart=on-failure
RestartSec=5
UMask=0000

NoNewPrivileges=true
RuntimeDirectory=secubox
RuntimeDirectoryPreserve=yes
RuntimeDirectoryMode=0775

ReadWritePaths=/run/secubox /var/lib/secubox /etc/secubox /var/log/secubox

[Install]
WantedBy=multi-user.target