[Unit]
Description=ONCP Master Node - CDN Control Plane
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=oncp
Group=oncp
WorkingDirectory=/var/lib/oncp
ExecStart=/usr/local/bin/oncp-master serve --listen 0.0.0.0:8080 --database /var/lib/oncp/oncp.db --log-level info
Restart=on-failure
RestartSec=10s

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/oncp

[Install]
WantedBy=multi-user.target