[Unit]
Description=Simple web-based and cross platform PostgreSQL database explorer
Documentation=https://sosedoff.github.io/pgweb

[Service]
User=pgweb
Group=pgweb
StateDirectory=/var/lib/pgweb
WorkingDirectory=/var/lib/pgweb
ExecStart=/usr/bin/pgweb --skip-open --address="sysd?name=pgweb.socket&idle_timeout=30m" --bookmarks-dir=bookmarks --queries-dir=queries

NoNewPrivileges=yes
CapabilityBoundingSet=
RestrictNamespaces=true
SystemCallFilter=@system-service

PrivateTmp=true
ProtectSystem=strict
ProtectHome=yes