[Unit]
Description=barox Virtual Switch Simulator - SNMP Agent
After=network.target mysql.service mariadb.service
Wants=mysql.service

[Service]
Type=simple
User=www-data
Group=www-data
WorkingDirectory=/var/www/html/barox-swtsim
ExecStart=/usr/bin/php /var/www/html/barox-swtsim/workers/snmp-agent.php
Restart=on-failure
RestartSec=5

; Allows binding UDP/161 (a privileged port) without running as root (§16).
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
NoNewPrivileges=true
ProtectSystem=full
ProtectHome=true

StandardOutput=journal
StandardError=journal
SyslogIdentifier=barox-snmp

[Install]
WantedBy=multi-user.target