[Unit]
Description=Dealspace M&A Platform
After=network.target
StartLimitIntervalSec=0

[Service]
Type=simple
User=johan
WorkingDirectory=/opt/dealspace
EnvironmentFile=/opt/dealspace/.env
ExecStart=/opt/dealspace/bin/dealspace
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal
SyslogIdentifier=dealspace
# Security hardening
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ReadWritePaths=/opt/dealspace/data /opt/dealspace/store /opt/dealspace/logs

[Install]
WantedBy=multi-user.target