[Unit]
Description=Beszel fleet monitoring agent
Wants=network-online.target
After=network-online.target

[Service]
User=beszel
Group=beszel
EnvironmentFile=/etc/beszel-agent/environment
ExecStart=/usr/local/bin/beszel-agent
Restart=on-failure
RestartSec=5
StateDirectory=beszel-agent
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=read-only
PrivateTmp=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
RestrictSUIDSGID=yes

[Install]
WantedBy=multi-user.target