[Unit]
Description=Limristem eMail API (FastAPI)
After=network.target mariadb.service redis-server.service nginx.service
Wants=network-online.target

[Service]
WorkingDirectory=__BASE_DIR__
EnvironmentFile=/etc/limristem-mail.env
Environment=PYTHONDONTWRITEBYTECODE=1
Environment=PYTHONUNBUFFERED=1
ExecStart=__BASE_DIR__/.venv/bin/uvicorn api.app:app --host ${LIMRISTEM_MAIL_API_BIND} --port ${LIMRISTEM_MAIL_API_PORT} --proxy-headers --forwarded-allow-ips=127.0.0.1
Restart=on-failure
RestartSec=2
User=limristem-mail
Group=limristem-mail
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictSUIDSGID=yes
LockPersonality=yes
ReadWritePaths=__DKIM_KEYS_DIR__

[Install]
WantedBy=multi-user.target