[Unit]
Description=Minecraft Server Backup
Wants=network.target
After=network.target

[Service]
Type=simple
User=minecraft
Group=minecraft
Nice=5
KillMode=none
ProtectHome=true
ProtectSystem=full
ProtectControlGroups=true
ProtectKernelModules=true
ProtectKernelTunables=true
PrivateDevices=true
NoNewPrivileges=true
PrivateTmp=true
ReadWriteDirectories=/srv/minecraft/paper/backup
WorkingDirectory=/srv/minecraft/paper/backup
ExecStart=/usr/local/bin/wardenctl backup

[Install]
WantedBy=multi-user.target