[Unit]
Description=Clean up ejabberd
Documentation=https://dev.sum7.eu/sum7/ejabberd-tools/-/blob/master/README.md
Requires=ejabberd.service

[Service]
Type=oneshot
User=nobody
Group=nobody
Environment="PATH=/opt/ejabberd-tools/venv/bin:/usr/local/bin:/usr/bin:/bin"
ExecStart=/opt/ejabberd-tools/cleanup.py
WorkingDirectory=/opt/ejabberd-tools/
PrivateDevices=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=yes
ProtectSystem=full
NoNewPrivileges=yes

[Install]
WantedBy=multi-user.target