[Unit]
Description=Render stats-site templates and deploy to /var/www/stats-site

[Service]
Type=oneshot
User=root
Group=root
ExecStart=/opt/stats-site/build.sh
StandardOutput=journal
StandardError=journal
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/var/www/stats-site
ProtectHome=true
PrivateTmp=true