[Unit]
Description=Shared Album backend
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=album
Group=album
WorkingDirectory=/opt/shared-album
EnvironmentFile=/opt/shared-album/.env
ExecStart=/opt/shared-album/shared-album
Restart=on-failure
RestartSec=5s

# Безопасность
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/shared-album

[Install]
WantedBy=multi-user.target