[Unit]
Description=Mail ingest (HTTP to LMTP)
After=network.target dovecot.service
Wants=dovecot.service

[Service]
Type=exec
ExecStart=/usr/local/bin/ingest
EnvironmentFile=/etc/ingest.env
Restart=on-failure
RestartSec=2

DynamicUser=yes
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictAddressFamilies=AF_INET AF_UNIX
RestrictNamespaces=yes
LockPersonality=yes
MemoryDenyWriteExecute=yes
SystemCallFilter=@system-service
SystemCallArchitectures=native

[Install]
WantedBy=multi-user.target