implementation done by Codex

systemd/camera-webui.service

@@ -0,0 +1,28 @@
+[Unit]
+Description=Camera Web UI — live feed and recognition service
+After=network.target nvargus-daemon.service
+Wants=nvargus-daemon.service
+
+[Service]
+Type=simple
+User=mikkeli
+Group=mikkeli
+WorkingDirectory=/home/mikkeli/dev/camera-webui
+Environment=PATH=/home/mikkeli/dev/camera-webui/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+Environment=PYTHONUNBUFFERED=1
+ExecStart=/home/mikkeli/dev/camera-webui/.venv/bin/camera-webui
+Restart=on-failure
+RestartSec=5
+
+# Security hardening (no root needed)
+NoNewPrivileges=true
+ProtectHome=read-only
+ReadWritePaths=/home/mikkeli/dev/camera-webui
+
+# Logging
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=camera-webui
+
+[Install]
+WantedBy=multi-user.target