[Unit]
Description=TERA privileged Net-SNMP configuration adapter
After=local-fs.target snmpd.service
Wants=snmpd.service
Before=tera-api.service

[Service]
Type=simple
User=root
Group=tera
EnvironmentFile=-/etc/tera/tera-snmpd.env
ExecStart=/usr/bin/tera-snmpd
Restart=on-failure
RestartSec=2s
RuntimeDirectory=tera-snmpd
RuntimeDirectoryMode=0750
UMask=0007
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true
ProtectControlGroups=true
ProtectKernelModules=true
ProtectKernelTunables=true
RestrictAddressFamilies=AF_UNIX
RestrictSUIDSGID=true
ReadWritePaths=/run/tera-snmpd /etc/snmp /var/lib/net-snmp

[Install]
WantedBy=multi-user.target