[Unit]
Description=Handy-Insel Portal
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=hi-portal
Group=hi-portal
WorkingDirectory=/opt/hi-portal
EnvironmentFile=/etc/hi-portal/portal.env
ExecStart=/usr/bin/node dist/server/index.js
Restart=always
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/hi-portal

[Install]
WantedBy=multi-user.target