[Unit]
Description=Minimal recipe Gemini proxy
After=network-online.target
Wants=network-online.target
Requires=gemini-tunnel.service
After=gemini-tunnel.service

[Service]
User=recipe
Group=recipe
WorkingDirectory=/opt/recipe
EnvironmentFile=/etc/recipe/recipe.env
ExecStart=/opt/recipe/venv/bin/gunicorn --workers 2 --bind 127.0.0.1:8770 --timeout 200 app:app
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
StateDirectory=recipe
StateDirectoryMode=0770

[Install]
WantedBy=multi-user.target