[Unit]
Description=Chatlogger read-only HTTP API (Tailscale-only)
After=network-online.target chatlogger-bot@arakawa.service
Wants=network-online.target

[Service]
Type=simple
WorkingDirectory=/opt/homelab-brain/chatlogger
EnvironmentFile=/opt/chatlogger/api.env
Environment=PYTHONUNBUFFERED=1
ExecStart=/opt/bot-venv/bin/python /opt/homelab-brain/chatlogger/api.py
Restart=always
RestartSec=5
KillMode=control-group
TimeoutStopSec=10

ProtectSystem=strict
ReadOnlyPaths=/opt/homelab-brain
ReadWritePaths=/opt/chatlogger
ProtectHome=true
PrivateTmp=true
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target