# Van Emous CRM: gunicorn achter nginx (server/setup.sh installeert dit naar /etc/systemd/system/).
[Unit]
Description=Van Emous CRM
After=network-online.target
Wants=network-online.target

[Service]
User=crm
Group=crm
WorkingDirectory=/srv/vanemous-crm/current
Environment=CRM_DATA=/srv/vanemous-crm/data
Environment=CRM_PROXY=1
ExecStart=/srv/vanemous-crm/current/.venv/bin/gunicorn --workers 2 --bind 127.0.0.1:5050 \
  --timeout 120 --access-logfile - --error-logfile - app:app
Restart=on-failure
RestartSec=3

# afscherming: alleen de datamap is schrijfbaar
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/srv/vanemous-crm/data

[Install]
WantedBy=multi-user.target