[Unit]
Description=Scout 轻量化包管理服务
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=scout
Group=scout
WorkingDirectory=/opt/scout
EnvironmentFile=/etc/scout/scout.env
ExecStart=/opt/scout/scout-server
Restart=on-failure
RestartSec=5s

# 服务端自身只监听内网地址，公网 TLS 和域名由反向代理处理。
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/scout

[Install]
WantedBy=multi-user.target