[Unit]
Description=No as a Service (NaaS)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
Restart=always
RestartSec=10
TimeoutStopSec=30

# User configuration
User=naas
Group=naas

# Load configuration from /etc/default/naas
EnvironmentFile=-/etc/default/naas

# Binary execution
ExecStart=/usr/bin/naas

# Security settings
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=

# Resource limits
MemoryMax=256M
CPUQuota=50%

[Install]
WantedBy=multi-user.target