[Unit]
Description=Mimi assistant
After=network.target
[Service]
ExecStart=/home/mimi/mimi
WorkingDirectory=/home/mimi
EnvironmentFile=/etc/env/mimi.env
User=mimi
Group=mimi
LimitNOFILE=65536
Restart=on-failure
TimeoutSec=30
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
AmbientCapabilities=CAP_NET_BIND_SERVICE
StandardOutput=journal
StandardError=journal
[Install]
WantedBy=multi-user.target