[Unit]
Description=Minimal Gemini image proxy
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=gemini-proxy
Group=gemini-proxy
WorkingDirectory=/opt/gemini-proxy
EnvironmentFile=/etc/gemini-proxy/gemini-proxy.env
ExecStart=/opt/gemini-proxy/venv/bin/uvicorn app:app --host 127.0.0.1 --port 8768
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/run

[Install]
WantedBy=multi-user.target