[Unit]
Description=rollcall rack controller (DHCP/TFTP state, BMC commands, image cache, node API proxy)
After=network-online.target dnsmasq.service
Wants=network-online.target

[Service]
Type=simple
ExecStart=/usr/local/bin/rollcall rack -config /etc/rollcall/rack.json
Restart=always
RestartSec=3
User=rollcall
Group=rollcall
AmbientCapabilities=CAP_NET_BIND_SERVICE
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes
ReadWritePaths=/srv/tftp/pxelinux.cfg -/srv/tftp/grub /var/lib/rollcall /var/cache/rollcall

[Install]
WantedBy=multi-user.target