[Unit]
Description=Umuto Node (ABCI + CometBFT launcher)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=umotu
Group=umotu
EnvironmentFile=-/etc/default/umotu-node
ExecStartPre=/usr/bin/mkdir -p /var/lib/umotu
WorkingDirectory=/var/lib/umotu
ExecStart=/usr/local/bin/umotu-node --home /var/lib/umotu
Restart=on-failure
RestartSec=3s
LimitNOFILE=65536

# Hardening (relax if needed)
NoNewPrivileges=true
ProtectSystem=full
ProtectHome=true
PrivateTmp=true
CapabilityBoundingSet=

[Install]
WantedBy=multi-user.target