[Unit]
Description=I2P Python Router
Documentation=https://geti2p.net/
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=i2p
Group=i2p
ExecStart=/usr/bin/i2p-router --data-dir /var/lib/i2p-python --log-level INFO
Restart=on-failure
RestartSec=10

# Data directory
StateDirectory=i2p-python
StateDirectoryMode=0700

# Hardening
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
NoNewPrivileges=true
ReadWritePaths=/var/lib/i2p-python
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE

# Resource limits
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target