[Unit]
Description=MeshRay - Simple and Efficient VPN Mesh Network
After=network.target network-online.target
Wants=network-online.target

[Service]
Type=simple
User=root
Group=root
ExecStart=/opt/meshray/meshray
Restart=on-failure
RestartSec=5
LimitNOFILE=65535

# Resource limits
CPUQuota=80%
MemoryMax=2G

# Security hardening
ProtectSystem=strict
ProtectHome=read-only
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target