[Unit]
Description=Speedport Smart 4 Prometheus Exporter
Documentation=https://github.com/your-user/speedport-exporter
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=speedport-exporter
Group=speedport-exporter

ExecStart=/usr/local/bin/speedport-exporter serve -listen :9810

Environment=SPEEDPORT_HOST=speedport.ip
# Uncomment and set if you need authenticated endpoints:
# Environment=SPEEDPORT_PASSWORD=your-password-here

Restart=on-failure
RestartSec=10

# Security hardening
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes
PrivateDevices=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
ReadWritePaths=

[Install]
WantedBy=multi-user.target