[Unit]
Description=Radicale CalDAV and CardDAV server
After=network.target remote-fs.target

[Service]
ExecStart=/usr/bin/radicale -f
NoNewPrivileges=true
ProtectKernelModules=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths=/var/lib/radicale /var/log/radicale

[Install]
WantedBy=multi-user.target