[Unit]
Description=SmartBotic CRM Webserver
Documentation=https://github.com/smartbotic/smartbotic-crm
After=network.target smartbotic-database.service
Requires=smartbotic-database.service

[Service]
Type=simple
User=%i
Group=%i
WorkingDirectory=/opt/smartbotic-crm
ExecStart=/opt/smartbotic-crm/build/webserver/smartbotic-crm-webserver
Restart=on-failure
RestartSec=5
StandardOutput=journal
StandardError=journal
# Shutdown timeout - send SIGKILL after 10 seconds if graceful shutdown fails
TimeoutStopSec=10

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true

# Environment
Environment="SMARTBOTIC_SERVER_HTTP_PORT=18080"
Environment="SMARTBOTIC_SERVER_WS_PORT=18081"
Environment="SMARTBOTIC_SERVER_DATABASE_HOST=localhost"
Environment="SMARTBOTIC_SERVER_DATABASE_PORT=50151"
Environment="SMARTBOTIC_SERVER_STATIC_PATH=/opt/smartbotic-crm/webui/dist"
# Set JWT secret via environment or config file
# Environment="SMARTBOTIC_SERVER_JWT_SECRET=your-secret-here"

[Install]
WantedBy=multi-user.target