[Unit]
Description=ffsync
Requires=network.target
After=network.target

Type=simple
[Service]
ExecStart=/app/local/bin/gunicorn --paste /ffsync/syncserver.ini
SyslogIdentifier=ffsync
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectControlGroups=true
ProtectKernelModules=true
InaccessiblePaths=/etc /home /opt /srv /var/local /var/mail
RemoveIPC=true
User=app
Group=app
WorkingDirectory=/data
#Restart=on-failure

[Install]
WantedBy=multi-user.target