[Unit]
Description=Tractatus AI Safety Framework (Development)
Documentation=https://tractatus.sydigital.co.nz
After=network.target mongod.service
Wants=mongod.service

[Service]
Type=simple
User=theflow
Group=theflow
WorkingDirectory=/home/theflow/projects/tractatus

# Environment
Environment=NODE_ENV=development
Environment=PORT=9000
EnvironmentFile=/home/theflow/projects/tractatus/.env

# Execution
ExecStart=/usr/bin/node src/server.js
Restart=always
RestartSec=10

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=/home/theflow/projects/tractatus/logs
ReadWritePaths=/home/theflow/projects/tractatus/uploads

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=tractatus-dev

# Resource limits
LimitNOFILE=65536
MemoryLimit=1G

[Install]
WantedBy=multi-user.target