[Unit]
Description=Virtual Redfish Emulation service
After=syslog.target network.target

[Service]
Type=simple
User=vbmc
Group=vbmc
WorkingDirectory=/var/lib/vbmcd
ProtectSystem=full
ProtectHome=true
PrivateTmp=true
AmbientCapabilities=CAP_NET_BIND_SERVICE
NoNewPrivileges=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
ExecStart=/usr/bin/sushy-emulator --config /etc/sushy-emulator/sushy-emulator.conf
Restart=always
RestartSec=1

[Install]
WantedBy=multi-user.target