[Unit]
Description=SmartThings WindFree OAuth linking helper
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=smartthings-poller
Group=smartthings-poller
EnvironmentFile=/etc/smartthings-windfree/oauth-secrets
ExecStart=/opt/smartthings-windfree/venv/bin/smartthings-windfree-oauth --config /etc/smartthings-windfree/oauth.toml
Restart=on-failure
RestartSec=10
StateDirectory=smartthings-windfree
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6

[Install]
WantedBy=multi-user.target