[Unit]
Description=ReceiptNext — AI-Powered Expense Tracker
Documentation=https://git.lohmar.co.uk/cclohmar/ReceiptNext
After=network.target

[Service]
Type=simple
User=receiptnext
Group=receiptnext
WorkingDirectory=/opt/receiptnext
ExecStart=/usr/local/bin/receiptnext
Restart=always
RestartSec=5
EnvironmentFile=-/etc/receiptnext/.env
StandardOutput=append:/var/log/receiptnext.log
StandardError=append:/var/log/receiptnext.log

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true

[Install]
WantedBy=multi-user.target