[Unit]
Description=Cantarire si etichetare (Flask/waitress)
Documentation=file:///opt/cantarire-etichetare/README.md
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=cantarire
Group=cantarire
# Necesar pentru accesul la adaptorul USB-serial al cantarului (daca e cazul).
SupplementaryGroups=dialout
WorkingDirectory=/opt/cantarire-etichetare
Environment=PYTHONUNBUFFERED=1
EnvironmentFile=-/etc/cantarire.env
ExecStart=/opt/cantarire-etichetare/.venv/bin/python run.py --production --port 5000
Restart=on-failure
RestartSec=3
TimeoutStopSec=15

# Scriere doar in folderul de date si in /tmp.
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true
ReadWritePaths=/var/lib/cantarire

[Install]
WantedBy=multi-user.target