[Unit]
Description=mistral.rs inference server (@FLAVOUR@, instance %i)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=mistralrs
Group=mistralrs
SupplementaryGroups=video render
EnvironmentFile=/etc/mistralrs/%i.conf
ExecStart=@BINARY@ $MISTRALRS_ARGS
Restart=on-failure
RestartSec=10s

NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/var/lib/mistralrs /var/cache/mistralrs
PrivateTmp=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes

StateDirectory=mistralrs
CacheDirectory=mistralrs

[Install]
WantedBy=multi-user.target