[Unit]
Description=SignalScope dashboard
After=network-online.target signalscope-monitor.service
Wants=network-online.target

[Service]
Type=simple
User=signalscope
Group=signalscope
WorkingDirectory=/opt/signalscope
# Binds to loopback only by default. Do not change --host to 0.0.0.0 without
# putting an authenticating reverse proxy in front — see the README section
# "Exposing the dashboard beyond loopback".
ExecStart=/opt/signalscope/.venv/bin/fgai dashboard \
    --host 127.0.0.1 \
    --port 8088 \
    --status-file /opt/signalscope/state/fgai-status.json \
    --config-file /opt/signalscope/state/fgai-config.json \
    --image-dir /opt/signalscope/images
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/signalscope/state

[Install]
WantedBy=multi-user.target