[Unit]
Description=LogMon - Log Monitoring and IP Blocking Daemon
After=network.target syslog.target

[Service]
Type=forking
User=root
Group=root
WorkingDirectory=/opt/logmon
ExecStart=/usr/bin/python3 /opt/logmon/logmon.py -c /etc/logmon/config.ini
ExecReload=/bin/kill -HUP $MAINPID
PIDFile=/var/run/logmon.pid
Restart=on-failure
RestartSec=10s

# Security hardening
PrivateTmp=yes
NoNewPrivileges=false
ProtectSystem=strict
ReadWritePaths=/var/log /var/run /etc/csf

[Install]
WantedBy=multi-user.target