[Unit]
Description=NetBird Peer Renamer Watcher
After=network.target

[Service]
Type=simple
ExecStart=/opt/netbird-watcher/netbird_watcher.py --config /etc/netbird-watcher/config.json
Restart=always
RestartSec=10

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/netbird-watcher
PrivateTmp=true

[Install]
WantedBy=multi-user.target