[Unit]
Description=VPN Security Monitor - Continuous Protection Monitoring
Documentation=https://github.com/yourusername/vpn-gateway
After=vpn-killswitch.service network-online.target
Requires=vpn-killswitch.service
Wants=network-online.target

[Service]
Type=simple
User=root
Group=root

# Execute monitoring script
ExecStart=/usr/local/bin/vpn-security-monitor.sh

# Restart policy
Restart=always
RestartSec=30
StartLimitInterval=300
StartLimitBurst=5

# Logging
StandardOutput=journal
StandardError=journal

# Resource limits
CPUQuota=10%
MemoryLimit=100M

# Security
NoNewPrivileges=true
PrivateTmp=true

# Kill settings
KillMode=process
KillSignal=SIGTERM
TimeoutStopSec=10

[Install]
WantedBy=multi-user.target