[Unit]
Description=SVOS front door identity check (tailscaled WhoIs, fail closed) - eshpfi configs/svos-front
After=tailscaled.service
Wants=tailscaled.service

[Service]
DynamicUser=true
ExecStart=/usr/bin/python3 /usr/local/lib/svos-front/svos-whois-auth.py
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
Restart=on-failure
RestartSec=2

[Install]
WantedBy=multi-user.target