[Unit]
Description=KJV API endpoint at localhost port 1611

[Service]
#ExecStart=uwsgi_python3 --http-socket :1611 --wsgi-file /opt/kjv-api/app.py --callable app --stats 127.0.0.1:9191
ExecStart=/opt/kjv-api/kjv-api.sh
User=kjv
EnvironmentFile=/etc/environment
KillMode=mixed
# Hardening: the app may only write to its databases and logs, never its own code
NoNewPrivileges=yes
ProtectSystem=strict
ReadWritePaths=/opt/kjv-api/data /opt/kjv-api/logs
ProtectHome=yes
PrivateTmp=yes

[Install]
WantedBy=multi-user.target