[Unit]
Description=nasmon - NAS health monitor (SMART/ZFS dashboard and alerts)
Documentation=file:///usr/share/doc/nasmon/README.md
After=network-online.target zfs.target
Wants=network-online.target

[Service]
Type=simple
# smartctl and zpool need root
User=root
ExecStart=/usr/bin/nasmon -listen :8090 -config /etc/nasmon/config.json -data /var/lib/nasmon
Restart=on-failure
RestartSec=5s

# hardening
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/var/lib/nasmon /etc/nasmon
ProtectKernelTunables=yes
ProtectControlGroups=yes
RestrictSUIDSGID=yes
LockPersonality=yes

[Install]
WantedBy=multi-user.target