[Unit]
Description=Mission Core VESC Tool service
Wants=modprobe@cdc_acm.service
After=systemd-udev-settle.service modprobe@cdc_acm.service

[Service]
Type=simple
User=mission-core-vesc
Group=mission-core-node
SupplementaryGroups=mission-core-vesc
WorkingDirectory=/usr/lib/mission-core-vesc
ExecStart=/usr/bin/python3 -B -m runtime.server
RuntimeDirectory=mission-core-vesc
RuntimeDirectoryMode=0750
StateDirectory=mission-core-vesc
StateDirectoryMode=0700
UMask=0007
Restart=on-failure
RestartSec=5
NoNewPrivileges=yes
CapabilityBoundingSet=
AmbientCapabilities=
PrivateNetwork=yes
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictSUIDSGID=yes
RestrictAddressFamilies=AF_UNIX
DevicePolicy=closed
DeviceAllow=char-ttyACM rw
MemoryMax=512M
TasksMax=64

[Install]
WantedBy=multi-user.target