[Unit]
Description=Arcadia Studio model REST service
After=network.target

[Service]
Type=simple
User=arcadia
Group=arcadia
StateDirectory=arcadia
StateDirectoryMode=0700
ExecStart=/usr/local/bin/arcadia-server --bind 127.0.0.1:8787 --data-dir /var/lib/arcadia --token-file /etc/arcadia/token
Restart=on-failure
RestartSec=2
TimeoutStopSec=45
NoNewPrivileges=true
PrivateTmp=true
PrivateDevices=true
ProtectSystem=strict
ProtectHome=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
UMask=0077

[Install]
WantedBy=multi-user.target