[Unit]
Description=TERA validated serial line and exclusive stream controller
After=local-fs.target tera-logd.service
Wants=tera-logd.service
Before=tera-api.service

[Service]
Type=simple
User=tera
Group=tera
EnvironmentFile=-/etc/tera/tera-seriald.env
ExecStart=/usr/bin/tera-seriald
Restart=on-failure
RestartSec=2s
UMask=0007
RuntimeDirectory=tera-seriald
RuntimeDirectoryMode=0750
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true
DevicePolicy=closed
DeviceAllow=/dev/ttyWCH* rw
ReadWritePaths=/run/tera-seriald
ReadOnlyPaths=/sys/class/tty /sys/devices

[Install]
WantedBy=multi-user.target