[Unit]
Description=Orchestra task orchestrator
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=orchestra
WorkingDirectory=/var/lib/orchestra
Environment=ORCHESTRA_DATA=/var/lib/orchestra/data
Environment=ORCHESTRA_PORT=9145
ExecStart=/usr/local/bin/orchestra
Restart=on-failure
RestartSec=5s
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/var/lib/orchestra
PrivateTmp=true

[Install]
WantedBy=multi-user.target