File radicale.service of Package Radicale

[Unit]
Description=Radicale CalDAV (calendar) and CardDAV (contact) server
Documentation=http://radicale.org/documentation/
After=network.target
Requires=network.target

[Service]
User=radicale
Group=radicale
ExecStart=/usr/bin/env python3 -m radicale
Restart=on-failure
# Deny other users access to the calendar data
UMask=0027
# Additional security settings
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
NoNewPrivileges=true
ReadWritePaths=/var/lib/radicale/collections

[Install]
WantedBy=multi-user.target