[Unit]
Description=RemoteDesk controlled endpoint daemon
Documentation=https://github.com/remotedesk/remotedesk
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
Environment=REMOTEDESK_LISTEN=0.0.0.0:39500
Environment=REMOTEDESK_SHELL_HELPER=/usr/libexec/remotedesk-shell-session
Environment=REMOTEDESK_FILE_HELPER=/usr/libexec/remotedesk-file-session
EnvironmentFile=-/etc/remotedesk/agent.env
ExecStart=/usr/bin/remotedesk-agentd serve --listen ${REMOTEDESK_LISTEN} --ipc-socket /run/remotedesk/agentd.sock
Restart=on-failure
RestartSec=3s
StateDirectory=remotedesk
StateDirectoryMode=0700
RuntimeDirectory=remotedesk
RuntimeDirectoryMode=0755
UMask=0077
NoNewPrivileges=yes
PrivateTmp=yes
ProtectClock=yes
ProtectControlGroups=yes
ProtectHostname=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectSystem=strict
ReadWritePaths=/var/lib/remotedesk /run/remotedesk -/home
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
LockPersonality=yes
MemoryDenyWriteExecute=yes

[Install]
WantedBy=multi-user.target