[Unit]
Description=Workspace Access Host
After=network.target

[Service]
Type=notify
User=workspace-access
Group=workspace-access
WorkingDirectory=/opt/workspace-access
ExecStart=/opt/workspace-access/WorkspaceAccessHost host
Restart=on-failure
RestartSec=5
TimeoutStopSec=30
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
RuntimeDirectory=workspace-access
StateDirectory=workspace-access
UMask=0077

[Install]
WantedBy=multi-user.target