+systemd_service "supybot" do
+ description "OpenStreetMap IRC Robot"
+ after "network.target"
+ user "supybot"
+ exec_start "/usr/bin/supybot /etc/supybot/supybot.conf"
+ private_tmp true
+ private_devices true
+ protect_system "strict"
+ protect_home true
+ read_write_paths ["/etc/supybot", "/var/lib/supybot", "/var/log/supybot"]
+ no_new_privileges true
+ restart "on-failure"