A systemd file for a python SimpleHTTPServer with some hardening

simplehttp.service

# Based of https://gist.github.com/funzoneq/737cd5316e525c388d51877fb7f542de

[Unit]
Description=Job that runs the python SimpleHTTPServer daemon
Documentation=man:SimpleHTTPServer(1)
After=network.target

[Service]
Type=simple
AmbientCapabilities=CAP_NET_BIND_SERVICE
WorkingDirectory=/home/deluge/Downloads/
ExecStart=/usr/bin/python -m SimpleHTTPServer 80

# Hardening
DynamicUser=true
ProtectSystem=strict
ProtectHome=tmpfs
BindReadOnlyPaths=/home/deluge/Downloads/
PrivateDevices=true
CapabilityBoundingSet=CAP_NET_BIND_SERVICE

[Install]
Alias=http.service
WantedBy=multi-user.target