[Unit]
Description=Vishow.top IP lookup API
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=www-data
Group=www-data
WorkingDirectory=/opt/vishow-top
EnvironmentFile=/etc/vishow-top/api.env
RuntimeDirectory=vishow-top
RuntimeDirectoryMode=0750
UMask=0007
ExecStart=/opt/vishow-top/.venv/bin/uvicorn backend.app:app --uds /run/vishow-top/api.sock --workers 1 --no-proxy-headers --no-access-log
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectControlGroups=true
RestrictSUIDSGID=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
ReadWritePaths=/run/vishow-top

[Install]
WantedBy=multi-user.target