[Unit]
Description=Silo Item Database Server
Documentation=https://github.com/kindred-systems/silo
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=silo
Group=silo

# Working directory (web/dist is served relative to this)
WorkingDirectory=/opt/silo

# Environment file for secrets
EnvironmentFile=/etc/silo/silod.env

# Main process
ExecStart=/opt/silo/bin/silod -config /etc/silo/config.yaml

# Restart policy
Restart=on-failure
RestartSec=5s

# Security hardening
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes
ReadOnlyPaths=/etc/silo /opt/silo

# Resource limits
LimitNOFILE=65535
LimitNPROC=4096

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=silod

[Install]
WantedBy=multi-user.target