[Unit]
Description=DartNode Edge Control - Edge Router Management
Documentation=https://github.com/dantiez/dartnode-edge-control
After=network.target redis.service
Wants=network-online.target

[Service]
Type=simple
User=dn-edge
Group=dn-edge
ExecStart=/opt/dartnode-edge/dartnode-edge-control --config /etc/dartnode-edge/config.yaml
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
RestartSec=5
StartLimitInterval=60
StartLimitBurst=3

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/dartnode-edge /var/log/dartnode-edge /opt/dartnode-edge

# Resource limits
LimitNOFILE=65535
LimitNPROC=4096

# Environment
Environment=GOMAXPROCS=4

[Install]
WantedBy=multi-user.target