[Unit]
Description=VidRip - YouTube Video Drip Downloader
After=network.target

[Service]
Type=simple
User=www-data
Group=www-data
WorkingDirectory=/var/www/vidrip/backend
Environment="NODE_ENV=production"
Environment="PORT=3001"
ExecStart=/usr/bin/node /var/www/vidrip/backend/dist/server.js
Restart=always
RestartSec=10
StandardOutput=append:/var/log/vidrip/vidrip.log
StandardError=append:/var/log/vidrip/vidrip-error.log

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/www/vidrip/backend/downloads /var/www/vidrip/backend/data.db /var/log/vidrip

[Install]
WantedBy=multi-user.target