[Unit]
Description=Labyricorn Website Engine Control Plane
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=website-engine
Group=website-engine
WorkingDirectory=/opt/website-engine-control-plane
Environment=NODE_ENV=production
Environment=HOST=127.0.0.1
Environment=PORT=3001
Environment=LABYRICORN_BUILD_ROOT=/var/lib/website-engine/builds
Environment=LABYRICORN_SITE_DEFINITION_REPOSITORY=/var/lib/website-engine/repositories/labyricorn-site-git-repo
Environment=LABYRICORN_SITE_DEFINITION_REF=refs/heads/main
Environment=LABYRICORN_SITE_DEFINITION_PATH=.
ExecStart=/usr/bin/node /opt/website-engine-control-plane/dist/server.cjs
Restart=on-failure
RestartSec=5s
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/website-engine

[Install]
WantedBy=multi-user.target