[Unit]
Description=Prometheus — the service behind prometheus.x
Documentation=https://code.silentmode.st/silentmode/prometheus
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=prometheus
Group=prometheus
WorkingDirectory=/opt/prometheus
Environment=NODE_ENV=production
Environment=BIND=127.0.0.1
Environment=PORT=3700
Environment=BNS_NETWORK=chipnet
# ADMIN_PUBLISHER, VIRUSTOTAL_API_KEY, PAYMENT_REQUIRED, PROMETHEUS_PAYMENT_ADDRESS
# and PROMETHEUS_LISTING_FEE_USD go in the drop-in file at
# /etc/systemd/system/prometheus-service.service.d/override.conf so they are
# visible to systemd but not committed to the repo.
EnvironmentFile=-/etc/default/prometheus
ExecStart=/usr/bin/node service/server.js
Restart=on-failure
RestartSec=3s

# Hardening
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
# WritablePaths: the service writes the DB, the uploads directory, and (when
# the key does not yet exist) the service key file.
ReadWritePaths=/opt/prometheus/db.sqlite /opt/prometheus/uploads /opt/prometheus/.keys /opt/prometheus/build

[Install]
WantedBy=multi-user.target