[Unit]
Description=Cloud IP Validator - Control API
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=cloud-ip-validator
Group=cloud-ip-validator
ExecStart=/usr/local/bin/control-api -config /etc/cloud-ip-validator/control-api.yaml
# Holds the OpenStack admin credential for Floating IP management: always
# OS_AUTH_URL / OS_PROJECT_ID / OS_REGION_NAME, plus either OS_TOKEN
# (auth_method: token) or OS_USERNAME / OS_USER_DOMAIN_NAME / OS_PASSWORD
# (auth_method: password) — see docs/SETUP.md. Keep this file mode 0600,
# owned by the service user; never commit it or put credentials in the
# YAML config.
EnvironmentFile=/etc/cloud-ip-validator/control-api.env
WorkingDirectory=/var/lib/cloud-ip-validator
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/var/lib/cloud-ip-validator
PrivateTmp=true

[Install]
WantedBy=multi-user.target