[Unit]
Description=Local read-only honeypot evidence viewer (loopback only)
After=network-online.target
[Service]
EnvironmentFile=/etc/decoy.env
ExecStart=/usr/bin/python3 /opt/decoy/viewer.py --bind=${VIEWER_BIND} --port=${VIEWER_PORT} --log-dir=${VIEWER_LOG_DIR} --hide-ip=${VIEWER_HIDE_IP}
WorkingDirectory=/opt/decoy
UMask=0077
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadOnlyPaths=/var/lib/decoy
RestrictAddressFamilies=AF_INET
MemoryMax=256M
TasksMax=32
Restart=no
[Install]
WantedBy=multi-user.target