[Unit]
Description=EdgeGuard Scheduler (cron-like jobs)
Documentation=https://git.netcell-it.de/projekte/edgeguard-native
After=edgeguard-api.service
Requires=edgeguard-api.service

[Service]
Type=simple
User=edgeguard
Group=edgeguard
ExecStart=/usr/bin/edgeguard-scheduler
Restart=on-failure
RestartSec=10

NoNewPrivileges=false
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
PrivateTmp=true
PrivateDevices=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemCallFilter=@system-service
ReadWritePaths=/etc/edgeguard /var/lib/edgeguard /var/log/edgeguard

[Install]
WantedBy=multi-user.target