1 files changed, 31 insertions, 0 deletions
diff --git a/Biz/Kidcam/kidcam.service b/Biz/Kidcam/kidcam.service
new file mode 100644
index 0000000..4f65775
--- /dev/null
+++ b/Biz/Kidcam/kidcam.service
@@ -0,0 +1,31 @@
+[Unit]
+Description=Kidcam - Motion-activated family video streaming
+Documentation=file:///opt/kidcam/Biz/Kidcam/README.md
+After=network-online.target
+Requires=network-online.target
+
+[Service]
+Type=simple
+User=kidcam
+Group=kidcam
+WorkingDirectory=/opt/kidcam
+EnvironmentFile=/etc/kidcam/config.env
+ExecStart=/usr/bin/python3 -m Biz.Kidcam.Core
+Restart=on-failure
+RestartSec=10
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=kidcam
+
+# Security hardening
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/opt/kidcam/_
+DeviceAllow=/dev/video0 rw
+DeviceAllow=/dev/video1 rw
+SupplementaryGroups=video
+
+[Install]
+WantedBy=multi-user.target