[Unit]
Description=Unofficial authentication server for factorio

[Service]
DynamicUser=yes
ExecStart=/usr/bin/factoriauth -c /etc/factoriauth/config.toml run
StateDirectory=factoriauth
ConfigurationDirectory=factoriauth

ProtectSystem=strict
ProtectHome=yes
AmbientCapabilities=
CapabilityBoundingSet=
RestrictNamespaces=yes
RestrictAddressFamilies=AF_INET AF_INET6
SystemCallFilter=@system-service
PrivateDevices=yes
ProtectProc=noaccess

[Install]
WantedBy=multi-user.target