[Unit]
Description=veld HTTP server
Documentation=https://github.com/xinluw/veld
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
# Run as an unprivileged user. Use an existing one (e.g. www-data) or create a
# dedicated account, and make sure it owns /var/lib/veld.
User=www-data
Group=www-data
ExecStart=/usr/local/bin/veld -c /etc/veld/veld.conf --prefix /var/lib/veld start
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
RestartSec=2
LimitNOFILE=65535

# Optional hardening — relax if it conflicts with your chosen paths.
NoNewPrivileges=true
ProtectSystem=full
ReadWritePaths=/var/lib/veld

[Install]
WantedBy=multi-user.target