[Unit]
Description=Koinkamu Investment Analysis App
After=network.target mysql.service
Wants=mysql.service

[Service]
User=www-data
Group=www-data
WorkingDirectory=/opt/koinkamu
EnvironmentFile=/opt/koinkamu/.env
ExecStart=/opt/koinkamu/.venv/bin/gunicorn -c gunicorn.conf.py "app:create_app()"
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/opt/koinkamu/model_cache /opt/koinkamu/app/static/uploads
PrivateTmp=true

[Install]
WantedBy=multi-user.target