[Unit]
Description=Camera Web UI — live feed and recognition service
After=network.target nvargus-daemon.service
Wants=nvargus-daemon.service

[Service]
Type=simple
User=mikkeli
Group=mikkeli
WorkingDirectory=/home/mikkeli/dev/camera-webui
Environment=PATH=/home/mikkeli/dev/camera-webui/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
Environment=PYTHONUNBUFFERED=1
ExecStart=/home/mikkeli/dev/camera-webui/.venv/bin/camera-webui
Restart=on-failure
RestartSec=5

# Security hardening (no root needed)
NoNewPrivileges=true
ProtectHome=read-only
ReadWritePaths=/home/mikkeli/dev/camera-webui

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=camera-webui

[Install]
WantedBy=multi-user.target