[Unit]
Description=Read-only PLC DID resolver
Wants=network-online.target
After=network-online.target
AssertPathExists=/home/charlotte/Documents/Development/ATProto/plox/data/plox.db

[Service]
Type=exec
User=plc-mirror
Group=plc-mirror
RuntimeDirectory=plc-mirror
RuntimeDirectoryMode=0750
BindReadOnlyPaths=/home/charlotte/Documents/Development/ATProto/plox/data:/run/plc-mirror/archive
ExecStart=/usr/local/bin/plc-mirror --db /run/plc-mirror/archive/plox.db --listen 127.0.0.1:2486
Restart=on-failure
RestartSec=5s
KillSignal=SIGINT
TimeoutStopSec=30s
UMask=0027
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
StandardOutput=journal
StandardError=journal
SyslogIdentifier=plc-mirror

[Install]
WantedBy=multi-user.target