[Unit]
Description=AtlasOS - Calypso API Service
Documentation=https://github.com/atlasos/calypso
After=network.target postgresql.service
Requires=postgresql.service

[Service]
Type=simple
User=calypso
Group=calypso
WorkingDirectory=/opt/calypso/backend
ExecStart=/opt/calypso/backend/bin/calypso-api -config /etc/calypso/config.yaml
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal
SyslogIdentifier=calypso-api

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/calypso /var/log/calypso

# Resource limits
LimitNOFILE=65536
LimitNPROC=4096

# Environment
Environment="CALYPSO_LOG_LEVEL=info"
Environment="CALYPSO_LOG_FORMAT=json"

[Install]
WantedBy=multi-user.target