[Unit]
Description="Honk ActivityPub server"
After=syslog.target network.target
Requires=network.target

[Service]
Restart=always
RestartSec=30
WorkingDirectory=/usr/share/honk
ExecStart=/usr/bin/honk
NoNewPrivileges=yes
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectControlGroups=true
ReadWritePaths=/usr/share/honk


User=honk
Group=honk

[Install]
WantedBy=default.target