[Unit]
Description=Aegis402 monitoring probe
After=network-online.target

[Service]
Type=oneshot
User=aegis
Group=aegis
WorkingDirectory=/home/aegis/aegis402
EnvironmentFile=/etc/aegis402.env
ExecStart=/home/aegis/aegis402/venv/bin/python deploy/monitor.py
StandardOutput=journal
StandardError=journal
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ReadWritePaths=/home/aegis/aegis402/data
ProtectHome=read-only