[Unit]
Description=Cloud IP Validator - Admin Dashboard
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=cloud-ip-validator
Group=cloud-ip-validator
ExecStart=/usr/local/bin/admin-dashboard -config /etc/cloud-ip-validator/admin-dashboard.yaml
# Optional (leading "-": the file may be absent). Holds
# ADMIN_DASHBOARD_CONTROL_API_TOKEN (control-api's admin token) and the
# dashboard login: ADMIN_DASHBOARD_USERNAME, ADMIN_DASHBOARD_PASSWORD,
# ADMIN_DASHBOARD_SESSION_SECRET. Keep it mode 0600, owned by the service user.
EnvironmentFile=-/etc/cloud-ip-validator/admin-dashboard.env
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
PrivateTmp=true

[Install]
WantedBy=multi-user.target