[Unit]
Description=bal-server daemon
After=network.target

[Service]

EnvironmentFile=/etc/bal/bal-server.env

ExecStart=/usr/local/bin/bal-server 

StandardOutput=syslog
StandardError=syslog
SyslogIdentifier=bal-server

Type=simple
PIDFile=/run/bal-server/bal-server.pid
Restart=always
TimeoutSec=300
RestartSec=30

User=bal
UMask=0027

RuntimeDirectory=bal-server
RuntimeDirectoryMode=0710

PrivateTmp=true

ProtectSystem=full

NoNewPrivileges=true

PrivateDevices=true

MemoryDenyWriteExecute=true

[Install]
WantedBy=multi-user.target