[Unit]
Description=NextReceipt — AI-Powered Receipt Saver for Warranty & Returns
Documentation=https://git.lohmar.co.uk/cclohmar/NextReceipt
After=network.target

[Service]
Type=simple
User=nextreceipt
Group=nextreceipt
WorkingDirectory=/opt/nextreceipt
ExecStart=/opt/nextreceipt/app
Restart=always
RestartSec=5
EnvironmentFile=-/opt/nextreceipt/.env
StandardOutput=append:/var/log/nextreceipt.log
StandardError=append:/var/log/nextreceipt.log

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true

[Install]
WantedBy=multi-user.target