[Unit]
Description=TaskForge server
After=network.target

[Service]
User=taskforge
Group=taskforge
WorkingDirectory=/var/lib/taskforge
ExecStart=/opt/taskforge/bin/taskforge-server --db /var/lib/taskforge/taskforge.db --web /opt/taskforge/web --listen 127.0.0.1 --port 8080
Restart=always
RestartSec=2

# Hardening: the server can only write its database directory.
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/taskforge

[Install]
WantedBy=multi-user.target