v0.0.2: pre-productie (Bootstrap 5.3.3, LightPdf klant-PDF, server-setup en release-script)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

server/vanemous-crm.service

@@ -0,0 +1,26 @@
+# Van Emous CRM: gunicorn achter nginx (server/setup.sh installeert dit naar /etc/systemd/system/).
+[Unit]
+Description=Van Emous CRM
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+User=crm
+Group=crm
+WorkingDirectory=/srv/vanemous-crm/current
+Environment=CRM_DATA=/srv/vanemous-crm/data
+Environment=CRM_PROXY=1
+ExecStart=/srv/vanemous-crm/current/.venv/bin/gunicorn --workers 2 --bind 127.0.0.1:5050 \
+  --timeout 120 --access-logfile - --error-logfile - app:app
+Restart=on-failure
+RestartSec=3
+
+# afscherming: alleen de datamap is schrijfbaar
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/srv/vanemous-crm/data
+
+[Install]
+WantedBy=multi-user.target