[Unit]
Description=GLAM Deploy Webhook Service
Documentation=https://git.bronhouder.nl/kempersc/glam
After=network.target caddy.service

[Service]
Type=simple
User=glam
Group=glam
WorkingDirectory=/var/lib/glam/scripts
Environment="WEBHOOK_SECRET="
ExecStart=/usr/bin/python3 -m uvicorn deploy-webhook:app --host 127.0.0.1 --port 8099
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal

# Security
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/glam /var/www/glam-frontend

[Install]
WantedBy=multi-user.target