[Unit]
Description=TERA static Web UI and same-origin gateway
After=network.target tera-api.service tera-sessiond.service
Wants=tera-api.service tera-sessiond.service

[Service]
Type=simple
User=tera
Group=tera
EnvironmentFile=-/etc/tera/tera-web.env
ExecStart=/usr/bin/tera-web
Restart=on-failure
RestartSec=2s
UMask=0027
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true
ReadOnlyPaths=/usr/share/tera-web
StateDirectory=tera-web
StateDirectoryMode=0750
ReadWritePaths=/var/lib/tera-web

[Install]
WantedBy=multi-user.target