[Unit]
Description=PVE Backup Log Viewer
After=network.target

[Service]
User=www-data
Group=www-data
WorkingDirectory=/opt/pve-log-viewer
ExecStart=/opt/pve-log-viewer/venv/bin/python /opt/pve-log-viewer/app.py
Restart=on-failure
RestartSec=5

# Hardening (optional)
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadOnlyPaths=/var/log/pve

# Konfiguration via Umgebungsvariablen
# Environment=PVE_TASK_DIR=/var/log/pve/tasks
# Environment=LISTEN_HOST=0.0.0.0
# Environment=LISTEN_PORT=5000

[Install]
WantedBy=multi-user.target