[Unit]
Description=Smartbotic Database Service
Documentation=https://git.smartbotics.ai/fszontagh/smartbotic-database
After=network.target

[Service]
Type=notify
ExecStart=/opt/smartbotic/bin/smartbotic-database --config /etc/smartbotic/database.json
Restart=on-failure
RestartSec=5
TimeoutStartSec=30
TimeoutStopSec=30
WatchdogSec=30

# User/Group
User=smartbotic
Group=smartbotic

# Environment
EnvironmentFile=-/etc/smartbotic/smartbotic.env
Environment=LOG_LEVEL=info

# Working directory
WorkingDirectory=/var/lib/smartbotic/database

# Security hardening
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=true
PrivateTmp=yes
MemoryDenyWriteExecute=true
SystemCallFilter=@system-service

# Writable paths
ReadWritePaths=/var/lib/smartbotic/database /var/log/smartbotic

# Resource limits
LimitNOFILE=65536
LimitNPROC=4096

[Install]
WantedBy=multi-user.target