[Unit]
Description=Skull Pi Motion Control Service
Documentation=https://github.com/skullio/skull-pi
After=network-online.target skull-orchestrator.service
Wants=network-online.target
Requires=mosquitto.service skull-orchestrator.service

[Service]
Type=simple
User=%i
Group=%i
WorkingDirectory=/opt/Skull/apps
ExecStart=/opt/Skull/bin/skull-motion.sh
Restart=always
RestartSec=10
StandardOutput=append:/opt/Skull/logs/motion.log
StandardError=append:/opt/Skull/logs/motion.log

# Environment
Environment="PYTHONUNBUFFERED=1"
Environment="PATH=/opt/Skull/venv/bin:/usr/local/bin:/usr/bin:/bin"

# GPIO access for servo control
SupplementaryGroups=gpio

# Security
NoNewPrivileges=yes
ProtectHome=yes
ProtectSystem=strict
ReadWritePaths=/opt/Skull
DeviceAllow=/dev/gpiomem rw

# Resource limits
MemoryMax=128M

[Install]
WantedBy=skull.target